Log in Start free

Vulnerability · Published Jul 12, 2023 · Assigned by redhat

CVE-2023-3106Kernel: netlink socket crash (null pointer deref) in netlink_dump function

Medium 6.6

In plain English

A medium-severity null pointer dereference in Red Hat Enterprise Linux 6 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.6Medium
Exploit odds (30 days)0.3%top 78.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A NULL pointer dereference vulnerability was found in netlink_dump. This issue can occur when the Netlink socket receives the message(sendmsg) for the XFRM_MSG_GETSA, XFRM_MSG_GETPOLICY type message, and the DUMP flag is set and can cause a denial of service or possibly another unspecified impact. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is unlikely.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux4.8.5-1DEBIAN-CVE-2023-3106
Debian:13linux4.8.5-1DEBIAN-CVE-2023-3106
Debian:14linux4.8.5-1DEBIAN-CVE-2023-3106
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-3106
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-3106
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-3106
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2023-3106
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2023-3106
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-3106
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-3106
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-3106
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-3106

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references

Weakness: CWE-476 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

References