PT-2023-8399 · Linux+6 · Linux Kernel+6

Chengfeng Ye · Published 2023-10-04 · Updated 2025-04-24 · CVE-2024-0641

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A denial of service issue is present in the tipc crypto key revoke function of the Linux kernel's TIPC subsystem, located in net/tipc/crypto.c. This issue can be exploited by guests with local user privileges to trigger a deadlock, potentially causing the system to crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Locking

Weakness Enumeration

CWE-667

CWE-833

Related Identifiers

ALT-PU-2024-14046

ALT-PU-2024-6818

AZL-33888

BDU:2024-00636

CVE-2024-0641

OESA-2024-1106

OPENSUSE-SU-2024_0469-1

OPENSUSE-SU-2024_0515-1

SUSE-SU-2024:0469-1

SUSE-SU-2024:0476-1

SUSE-SU-2024:0514-1

SUSE-SU-2024:0515-1

SUSE-SU-2024:0516-1

USN-6624-1

USN-6626-1

USN-6626-2

USN-6626-3

USN-6628-1

USN-6628-2

USN-6652-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 171

• https://github.com/torvalds/linux/commit/08e50cf071847323414df0835109b6f3560d44f5 · Patch
• https://ubuntu.com/security/CVE-2023-46813 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-0641 · Security Note
• https://osv.dev/vulnerability/USN-6626-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-0582 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6628-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-0565 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-6622 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-46862 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-6606 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-35827 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-0340 · Security Note
• https://ubuntu.com/security/CVE-2024-0646 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-6817 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-5972 · Vendor Advisory