CVE-2023-4459
Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
21 Aug 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with normal user privilege to cause a denial of service due to a missing sanity check during cleanup.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
Red Hat · Red Hat Enterprise Linux 6Red Hat · Red Hat Enterprise Linux 7Red Hat · Red Hat Enterprise Linux 8Red Hat · Red Hat Enterprise Linux 8.2 Advanced Update SupportRed Hat · Red Hat Enterprise Linux 8.2 Telecommunications Update ServiceRed Hat · Red Hat Enterprise Linux 8.2 Update Services for SAP SolutionsRed Hat · Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportRed Hat · Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceRed Hat · Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsRed Hat · Red Hat Enterprise Linux 8.6 Extended Update SupportRed Hat · Red Hat Enterprise Linux 9Red Hat · Red Hat Enterprise Linux 9.0 Extended Update SupportRed Hat · Red Hat Virtualization 4 for Red Hat Enterprise Linux 8References
https://access.redhat.com/errata/RHSA-2024:0412https://access.redhat.com/errata/RHSA-2024:1250https://access.redhat.com/errata/RHSA-2024:1306https://access.redhat.com/errata/RHSA-2024:1367https://access.redhat.com/errata/RHSA-2024:1382https://access.redhat.com/errata/RHSA-2024:2006https://access.redhat.com/errata/RHSA-2024:2008https://access.redhat.com/security/cve/CVE-2023-4459https://bugzilla.redhat.com/show_bug.cgi?id=2219268https://github.com/torvalds/linux/commit/edf410cb74dc612fd47ef5be319c5a0bcd6e6ccd