CVEvulnerability

CVE-2023-42755

5.5 MEDIUM Published 2023-10-05 Modified 2026-10-15 Official page ↗
Status
Modified
Published
2023-10-05
Last modified
2026-10-15
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-125

Description

A flaw was found in the IPv4 Resource Reservation Protocol (RSVP) classifier in the Linux kernel. The xprt pointer may go beyond the linear part of the skb, leading to an out-of-bounds read in the `rsvp_classify` function. This issue may allow a local user to crash the system and cause a denial of service.

Affected configurations

• linux linux kernel (< 6.3) • redhat enterprise linux 8.0 • debian debian linux 10.0

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References