CVE-2023-3772

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP NET ADMIN privileges to directly dereference a NULL pointer in the xfrm update ae params() function, potentially leading to a kernel crash and denial of service. The vulnerability resides in the net/xfrm/xfrm user.c module.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.