PT-2022-6723 · Linux+4 · Linux Kernel+4

Davide Ornaghi · Published 2022-08-22 · Updated 2025-11-11 · CVE-2023-3338

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a null pointer dereference flaw in the Linux kernel's DECnet networking protocol. This flaw can be exploited by a remote user to crash the system by sending a specially crafted "Hello" message. The exploitation of this issue can lead to a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-376

CWE-476

Related Identifiers

ALSA-2023_6595

ALSA-2023_7109

ALSA-2024_10939

ALSA-2024_10943

ALSA-2024_10944

ALSA-2024_1607

ALSA-2024_2394

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

ALSA-2025_18281

ALSA-2025_19102

ALSA-2025_19103

ALSA-2025_19409

ALSA-2025_20518

ALT-PU-2023-7004

ALT-PU-2024-14046

ALT-PU-2024-6818

AZL-27636

AZL-31687

AZL-34801

AZL-61792

BDU:2023-03725

CVE-2023-3338

DLA-3508-1

DLA-3623-1

DSA-5480-1

MGASA-2023-0237

MGASA-2023-0238

OESA-2023-1435

OESA-2023-1436

OESA-2023-1437

OESA-2023-1438

OESA-2023-1439

USN-6416-1

USN-6416-2

USN-6416-3

USN-6417-1

USN-6445-1

USN-6445-2

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Ubuntu

References · 111

• 🔥 https://github.com/TurtleARM/CVE-2023-3338 · Exploit
• 🔥 https://github.com/TurtleARM/CVE-2023-3338-DECPwn · Exploit
• 🔥 https://seclists.org/oss-sec/2023/q2/276 · Exploit
• https://osv.dev/vulnerability/OESA-2023-1439 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-4273 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-38432 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-4194 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-3338 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-4921 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6416-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6445-1 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3623-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-3358 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-3338 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-4622 · Vendor Advisory