Orta CVSS 5.5 PoC var

CVE-2023-42754: Linux Kernel: NULL işaretçi başvurusu

Yayın: 5 Ekim 2023 22:15 · Güncelleme: 6 Kasım 2026 09:47

Açıklama (NVD)

A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before calling __ip_options_compile, which is not always the case if the skb is re-routed by ipvs. This issue may allow a local user with CAP_NET_ADMIN privileges to crash the system.

Özet bilgiler

Ürün: Linux Linux Kernel
CVSS v3.1: 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS: %0,43 (yüzdelik 37)
CWE: CWE-476
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
linux-linux-kernel	—	—	6.6
linux-linux-kernel	6.6	6.6	—
linux-linux-kernel	6.6	6.6	—
redhat-enterprise-linux	8.0	8.0	—
redhat-enterprise-linux	9.0	9.0	—
fedoraproject-fedora	37	37	—
fedoraproject-fedora	38	38	—
fedoraproject-fedora	39	39	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları