PT-2021-7683 · Linux+6 · Linux Kernel+6

Remy@_Mattata · Published 2021-01-09 · Updated 2023-07-11 · CVE-2023-1390

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A remote denial of service issue was found in the Linux kernel's TIPC kernel module. The tipc link xmit() function hits an unknown state while attempting to parse SKBs that are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization spiking to 100%, causing a denial of service condition. This issue is related to errors in pointer dereferencing in the TIPC protocol implementation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-1050

CWE-476

Related Identifiers

ALT-PU-2021-1136

ALT-PU-2021-1137

ALT-PU-2021-1168

ALT-PU-2021-1170

ALT-PU-2021-1188

ALT-PU-2021-1211

ALT-PU-2021-1332

ALT-PU-2021-1417

ALT-PU-2021-1424

ALT-PU-2021-1446

ALT-PU-2021-1531

ALT-PU-2021-1840

ALT-PU-2021-1862

ALT-PU-2021-1866

ALT-PU-2021-3430

BDU:2023-01284

CESA-2021_1578

CESA-2021_1739

CVE-2023-1390

RHSA-2021:1578

RHSA-2021:1739

RHSA-2021_1578

RHSA-2021_1739

RHSA-2023:3190

RHSA-2023:3191

RHSA-2023:4125

RHSA-2023:4126

RHSA-2023:4146

SUSE-SU-2023:1800-1

SUSE-SU-2023:1801-1

SUSE-SU-2023:1803-1

SUSE-SU-2023:1811-1

SUSE-SU-2023:1848-1

SUSE-SU-2023:1892-1

SUSE-SU-2023:1894-1

SUSE-SU-2023:2232-1

SUSE-SU-2023:2660-1

SUSE-SU-2023:2666-1

SUSE-SU-2023:2679-1

SUSE-SU-2023:2681-1

SUSE-SU-2023:2686-1

SUSE-SU-2023:2689-1

SUSE-SU-2023:2690-1

SUSE-SU-2023:2694-1

SUSE-SU-2023:2695-1

SUSE-SU-2023:2698-1

SUSE-SU-2023:2701-1

SUSE-SU-2023:2702-1

SUSE-SU-2023:2708-1

SUSE-SU-2023:2710-1

SUSE-SU-2023:2718-1

SUSE-SU-2023:2719-1

SUSE-SU-2023:2724-1

SUSE-SU-2023:2727-1

SUSE-SU-2023:2741-1

SUSE-SU-2023:2805-1

USN-6045-1

Affected Products

Alt Linux

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 249

• 🔥 https://infosec.exchange/@_mattata/109427999461122360 · Exploit
• https://github.com/torvalds/linux/commit/b77413446408fdd256599daf00d5be72b5f3e7c6 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-1670 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-1390 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:2710-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-01284 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2023:2232-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:1894-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:2690-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:1803-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-4095 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-1390 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2023:2702-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6045-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:2724-1 · Vendor Advisory