Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Lianhui Tang

#50386of 53,632
4.7Total CVSS
Vulnerabilities · 1
PT-2023-1620
4.7
2023-02-13
Linux · Linux Kernel · CVE-2023-26545
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 6.1.13 **Description** The issue is related to a double free error in the MPLS mechanism of the Linux kernel, which can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of data. This error occurs upon an allocation failure during the renaming of a device, specifically when registering the sysctl table under a new location in net/mpls/af mpls.c. **Recommendations** For Linux kernel versions prior to 6.1.13, update to version 6.1.13 or later to resolve the issue. As a temporary workaround, consider restricting access to the `net/mpls/af mpls.c` module to minimize the risk of exploitation.