Orta CVSS 5.5
CVE-2023-23454: Linux Kernel: güvenlik açığı
Açıklama (NVD)
cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (slab-out-of-bounds read) because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results).
Özet bilgiler
- Ürün
- Linux Linux Kernel
- CVSS v3.1
- 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - EPSS
- %0,34 (yüzdelik 28)
- CWE
- CWE-843
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| linux-linux-kernel | 2.6.12 | 6.1.4 | — |
| debian-debian-linux | 11.0 | 11.0 | — |