PT-2023-8457 · Linux+6 · Linux Kernel+6

黄思聪 · Published 2023-10-16 · Updated 2026-02-18 · CVE-2023-46343

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.9

Description The issue is related to a NULL pointer dereference in the send acknowledge function in net/nfc/nci/spi.c. This could potentially allow an attacker to cause a denial of service.

Recommendations For Linux kernel versions prior to 6.5.9, update to version 6.5.9 or later to resolve the issue.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2024-14046

ALT-PU-2024-6818

AZL-33971

BDU:2024-00865

CVE-2023-46343

OESA-2024-1109

OESA-2024-1110

OESA-2024-1111

OESA-2024-1112

OESA-2024-1113

OESA-2024-1114

OPENSUSE-SU-2024_0857-1

OPENSUSE-SU-2024_4140-1

SUSE-SU-2024:0856-1

SUSE-SU-2024:0857-1

SUSE-SU-2024:0925-1

SUSE-SU-2024:0926-1

SUSE-SU-2024:0975-1

SUSE-SU-2024:0976-1

SUSE-SU-2024:4081-1

SUSE-SU-2024:4100-1

SUSE-SU-2024:4103-1

SUSE-SU-2024:4140-1

SUSE-SU-2025:0034-1

USN-6625-1

USN-6625-2

USN-6625-3

USN-6680-1

USN-6680-2

USN-6680-3

USN-6686-1

USN-6686-2

USN-6686-3

USN-6686-4

USN-6686-5

USN-6705-1

USN-6926-1

USN-6926-2

USN-6926-3

USN-6938-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 630

• https://github.com/torvalds/linux/commit/7937609cd387246aed994e81aa4fa951358fba41 · Patch
• https://osv.dev/vulnerability/USN-6625-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26882 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6680-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-46960 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26901 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-46343 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:0925-1 · Vendor Advisory
• https://lore.kernel.org/netdev/20231013184129.18738-1-krzysztof.kozlowski%40linaro.org/T/#r38bdbaf8ae15305b77f6c5bc8e15d38f405623c7 · Patch
• https://osv.dev/vulnerability/USN-6686-3 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6938-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-23000 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-32247 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6938-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-25744 · Vendor Advisory