PT-2016-3448 · Linux+1 · Linux Kernel+1

Alex · Published 2016-07-18 · Updated 2024-02-15 · CVE-2023-3106

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference issue was found in the netlink dump function. This occurs when the Netlink socket receives a message of type XFRM MSG GETSA or XFRM MSG GETPOLICY with the DUMP flag set, potentially causing a denial of service or other unspecified impact. Although unlikely, privilege escalation cannot be fully ruled out due to the nature of the flaw. The vulnerability is related to the use of uninitialized variables in the xfrm state walk done() function in the net/xfrm/xfrm user.c module of the Linux kernel's XFRM subsystem. Exploitation may allow an attacker to impact data integrity, confidentiality, or availability, or potentially elevate privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Use of Uninitialized Resource

NULL Pointer Dereference

Weakness Enumeration

CWE-908

CWE-476

Related Identifiers

BDU:2023-03959

CVE-2023-3106

SUSE-SU-2023:3324-1

Affected Products

Linux Kernel

Suse

References · 50

• https://github.com/torvalds/linux/commit/1ba5bf993c6a3142e18e68ea6452b347f9cb5635 · Patch
• https://osv.dev/vulnerability/CVE-2023-3106 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-3106 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2221501 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-3106 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-3106 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-3106 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-3106 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3324-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-03959 · Security Note
• https://linux.oracle.com/errata/ELSA-2023-12759.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-3106 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2023-3106 · Note
• https://suse.com/security/cve/CVE-2023-1637 · Note
• https://suse.com/security/cve/CVE-2022-40982 · Note