NULL pointer dereference in Linux
CVE-2023-46838
Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of zero length, i.e. carry no data at all. Besides a certain initial portion of the to be transferred data, these parts are directly translated into what Linux calls SKB fragments. Such converted request parts can, when for a particular SKB they are all of length zero, lead to a de-reference of NULL in core networking code.
EPSS: 0.012 (64.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Linux — versions consult Xen advisory XSA-448
- Linux Linux_kernel
- Debian Debian_linux — versions 10.0
- Fedoraproject Fedora — versions 38, 39
Weakness classification (CWE)
References
- security@xen.org (Patch, Third Party Advisory)
- security@xen.org (Mailing List)
- security@xen.org (Mailing List)
- security@xen.org (Mailing List, Third Party Advisory)
- security@xen.org (Mailing List, Third Party Advisory)
- af854a3a-2127-422b-91ae-364da2661108
Frequently asked questions
- What is CVE-2023-46838?
- CVE-2023-46838 is a high-severity vulnerability in Linux, classified under NULL Pointer Dereference. CVSS score: 7.5/10. Published 2024-01-29.
- How severe is CVE-2023-46838?
- High severity. CVSS v3 base score is 7.5 out of 10.