Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Lianhui Tang

#50375de 53,633
4.7CVSS total
Vulnerabilidades · 1
PT-2023-1620
4.7
2023-02-13
Linux · Linux Kernel · CVE-2023-26545
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 6.1.13 **Description** The issue is related to a double free error in the MPLS mechanism of the Linux kernel, which can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of data. This error occurs upon an allocation failure during the renaming of a device, specifically when registering the sysctl table under a new location in net/mpls/af mpls.c. **Recommendations** For Linux kernel versions prior to 6.1.13, update to version 6.1.13 or later to resolve the issue. As a temporary workaround, consider restricting access to the `net/mpls/af mpls.c` module to minimize the risk of exploitation.