IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
5.5Orta

CVE-2023-4459Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()

Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support; Red Hat Red Hat Enterprise Linux 8.2 Telecommunications Update Service; Red Hat Red Hat Enterpris… Yayım: (3 yıl önce)

Açıklama

A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with normal user privilege to cause a denial of service due to a missing sanity check during cleanup.

Zayıflık türü (CWE): CWE-476

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
linux linux kernel < 5.18
redhat enterprise linux 8.0
Red Hat Red Hat Enterprise Linux 6 —
Red Hat Red Hat Enterprise Linux 7 —
Red Hat Red Hat Enterprise Linux 8 all versions
Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support all versions
Red Hat Red Hat Enterprise Linux 8.2 Telecommunications Update Service all versions
Red Hat Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions all versions
Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support all versions
Red Hat Red Hat Enterprise Linux 8.4 Telecommunications Update Service all versions
Red Hat Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions all versions
Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support all versions
Red Hat Red Hat Enterprise Linux 9 all versions
Red Hat Red Hat Enterprise Linux 9.0 Extended Update Support all versions
Red Hat Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 all versions
rhel aus 8.2 —
rhel aus 8.4 —
rhel e4s 8.2 —
rhel e4s 8.4 —
rhel eus 8.6 —
rhel eus 9.0 —
rhel tus 8.2 —
rhel tus 8.4 —
rhev hypervisor 4.4 —

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (3)
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* < 5.18
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
  • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

Aynı üründe son açıklar — Linux kernel

Puansız
CVE-2026-99288

inet: reject unhashed sockets during established lookups

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: inet: reject unhashed sockets during established lookups TCP established ehash lookups are lockless. The socket caches involved use SLAB_TYPESAFE_BY_RCU, so memory can be reused before an R…

Puansız
CVE-2026-99286

xen-netback: Fix XenBus connection failure cleanup

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: xen-netback: Fix XenBus connection failure cleanup xenvif_get_stats and xenvif_get_ethtool_stats capture vif->num_queues under rcu_read_lock. We need to unpublish vif->num_queues before syn…

Puansız
CVE-2026-99285

netfilter: nft_byteorder: remove multi-register support

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_byteorder: remove multi-register support 64bit byteorder conversion is broken when several registers need to be converted because the source register array advances in steps …

Puansız
CVE-2026-99284

net: skbuff: propagate shared-frag marker in skb_zerocopy()

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker in skb_zerocopy() skb_zerocopy() moves frag descriptors from @from into @to and takes a reference on each frag, but it does not copy skb_shinfo(fro…

Puansız
CVE-2026-99279

ksmbd: reclaim ended sessions on logoff and expiration

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: ksmbd: reclaim ended sessions on logoff and expiration LOGOFF and previous-session replacement leave sessions Expired with a zero credential expiry. Ended sessions can retain their memory a…