← back
CVE-2023-1382

CVE-2023-1382

CVSS 4.7 MEDIUMEPSS 0.2%CWE-476
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4.7EPSS 0.2%KEV nãoPoC Nuclei Metasploit Patch
Lifecycle
19 Apr 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A data race flaw was found in the Linux kernel, between where con is allocated and con->sock is set. This issue leads to a NULL pointer dereference when accessing con->sock->sk in net/tipc/topsrv.c in the tipc protocol in the Linux kernel.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
n/a · Kernel