PT-2023-33477 · Linux · Linux Kernel

Published

2023-01-17

·

Updated

2023-01-17

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.19
Description A memory leak issue was discovered in the cfctrl linkup request() function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v2.6.35.
Recommendations For Linux Kernel versions prior to v6.0.19, update to version v6.0.19 or later to resolve the issue. As a temporary workaround, consider restricting access to the cfctrl linkup request() function until a patch is available.

Related Identifiers

GSD-2023-1000400

Affected Products

Linux Kernel