CVE-2023-52991

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference issue has been identified in the Linux kernel. This issue occurs when the frag list is pulled into the linear area, leaving frag list as NULL, which can trigger a NULL pointer dereference and panic the kernel. The problem is related to the UDP listified GRO, which relies on frag list being untouched when passing through the network stack. The issue can be resolved by reversing the test condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.