NULL pointer dereference in Linux
CVE-2023-46838
Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of zero length, i.e. carry no data at all. Besides a certain initial portion of the to be transferred data, these parts are directly translated into what Linux calls SKB fragments. Such converted request parts can, when for a particular SKB they are all of length zero, lead to a de-reference of NULL in core networking code.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.012 (66.4th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 66th percentile — 66.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.012 · newest: 0.012 · change: 0.000
Affected products
- Linux — versions consult Xen advisory XSA-448
- Linux Kernel
- Debian Linux — versions 10.0
- Fedoraproject Fedora — versions 38, 39
Weakness classification (CWE)
References
- xenbits.xenproject.org/xsa/advisory-448.html (Patch, Third Party Advisory)
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/… (Mailing List)
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/… (Mailing List)
- lists.debian.org/debian-lts-announce/2024/06/msg00016.html (Mailing List, Third Party Advisory)
- lists.debian.org/debian-lts-announce/2024/06/msg00020.html (Mailing List, Third Party Advisory)
- af854a3a-2127-422b-91ae-364da2661108
Frequently asked questions
- What is CVE-2023-46838?
- CVE-2023-46838 is a high-severity vulnerability in Linux, classified under NULL Pointer Dereference. CVSS score: 7.5/10. Published 2024-01-29.
- How severe is CVE-2023-46838?
- High severity. CVSS v3 base score is 7.5 out of 10.