CVE-2023-3772
Medium
Description
A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel crash and denial of service.
SeverityMedium
CVSS5.5
Exploit probability—
Product
Linux Kernel
PublishedJul 25, 2023
First seenJul 25, 2023
Weakness typeCWE-476NULL pointer dereference
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | No range specified | — |
| redhat enterprise_linux | 8.0, 9.0 | — |
| redhat enterprise_linux_for_real_time | 8.0 | — |
| redhat enterprise_linux_for_real_time_for_nfv | 8.0 | — |
| fedoraproject fedora | No range specified | — |
| debian debian_linux | 10.0, 12.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.