VDB
CISA-2023-2166
CISA-2023-2166
PUBLISHED
CVSS 5.5 MEDIUM
Reported by redhat · Published April 19, 2023
A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in the receive path of CAN frames. A local user could use this flaw to crash the system or potentially cause a denial of service.
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | Linux | Linux Kernel version prior to Kernel 6.1 RC9 |
| n/a | Linux | Linux Kernel version prior to Kernel 6.1 RC9, Linux Kernel version prior to Kernel 6.1 RC9 |
Timeline
- Apr 19, 2023 CVE Published
- Feb 5, 2025 CVE Updated