PT-2022-6835 · Linux+3 · Linux Kernel+3

Dhananjay Arunesh

·

Published

2022-05-17

·

Updated

2024-04-25

·

CVE-2023-4459

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)
Description The issue is related to a NULL pointer dereference flaw in the vmxnet3 rq cleanup() function in the drivers/net/vmxnet3/vmxnet3 drv.c module of the Linux Kernel's vmxnet3 driver. This flaw may allow a local attacker with normal user privileges to cause a denial of service due to a missing sanity check during cleanup. The exploitation of this issue can lead to a denial of service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

AZL-27982
BDU:2023-04897
CVE-2023-4459
OESA-2023-1584
OESA-2023-1588
OPENSUSE-SU-2023_3599-1
OPENSUSE-SU-2023_3599-2
OPENSUSE-SU-2023_3600-1
OPENSUSE-SU-2023_3600-2
OPENSUSE-SU-2023_3656-1
OPENSUSE-SU-2023_3680-1
OPENSUSE-SU-2023_3682-1
OPENSUSE-SU-2023_3683-1
OPENSUSE-SU-2023_3683-2
OPENSUSE-SU-2023_3684-1
OPENSUSE-SU-2023_3704-1
OPENSUSE-SU-2023_3704-2
OPENSUSE-SU-2023_3964-1
OPENSUSE-SU-2023_3969-1
OPENSUSE-SU-2023_3971-1
OPENSUSE-SU-2023_3988-1
RHSA-2024:0412
RHSA-2024:1250
RHSA-2024:1306
RHSA-2024:1367
RHSA-2024:1382
RHSA-2024:2006
RHSA-2024:2008
SUSE-SU-2023:3599-1
SUSE-SU-2023:3599-2
SUSE-SU-2023:3600-1
SUSE-SU-2023:3600-2
SUSE-SU-2023:3601-1
SUSE-SU-2023:3656-1
SUSE-SU-2023:3680-1
SUSE-SU-2023:3681-1
SUSE-SU-2023:3682-1
SUSE-SU-2023:3684-1
SUSE-SU-2023:3687-1
SUSE-SU-2023:3705-1
SUSE-SU-2023:3785-1
SUSE-SU-2023:3964-1
SUSE-SU-2023:3969-1
SUSE-SU-2023:3971-1
SUSE-SU-2023:3988-1
SUSE-SU-2023:4028-1
USN-6388-1

Affected Products

Astra Linux
Linux Kernel
Suse
Ubuntu