PT-2022-6436
CVE-2023-1382
·
تاريخ النشر
2022-11-18
·
تاريخ التحديث
2025-07-26
الوصف من
CVSS 4.0
7.3
عاليةالمقاييسAV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a data race flaw in the Linux kernel's implementation of the TIPC protocol, which can lead to a NULL pointer dereference. This flaw is located between where
con is allocated and con->sock is set, specifically when accessing con->sock->sk in net/tipc/topsrv.c. The exploitation of this issue may allow a remote attacker to cause a denial of service.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾