Vulnerability in Linux

CVE-2023-54273

In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix leak of dev tracker At the stage of direction checks, the netdev reference tracker is already initialized, but released with wrong *_put() call.

EPSS: 0.002 (5.2th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 919e43fad5163a8ceb39826ecdee897a9f799351, 6.2, 0

References