PT-2023-32737 · Linux+2 · Linux Kernel+2

Rohit Keshri · Published 2023-12-11 · Updated 2024-09-16 · CVE-2023-6679

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null pointer dereference vulnerability was found in the dpll pin parent pin set() function in the Digital Phase Locked Loop (DPLL) subsystem in the Linux kernel. This issue could be exploited to trigger a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2024-1031

CVE-2023-6679

RHSA-2024:0439

RHSA-2024:0448

RHSA-2024:0461

RHSA-2024_0461

Affected Products

Alt Linux

Linux Kernel

Red Hat

References · 20

• https://access.redhat.com/errata/RHSA-2024:0448 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-6679 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2024:0439 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-12149.html · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2024:0461 · Vendor Advisory
• https://lore.kernel.org/netdev/[e-mail] · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/LBVHM4LGMFIHBN4UBESYRFMYX3WUICV5 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-6679 · Security Note
• https://ubuntu.com/security/CVE-2023-6679 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/7LSPIOMIJYTLZB6QKPQVVAYSUETUWKPF · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-6679 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-0461.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-6679 · Security Note
• https://twitter.com/fletch_ai/status/1737686127371288717 · Twitter Post
• https://t.me/cvenotify/70147 · Telegram Post