imPC@ndo IT

Tracker / CVE-2023-46838

CVE-2023-46838

High 7.5

Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of zero length, i.e. carry no data at all. Besides a certain initial portion of the to be transferred data, these parts are directly translated into what Linux calls SKB fragments. Such converted request parts can, when for a particular SKB they are all of length zero, lead to a de-reference of NULL in core networking code.

Affected products and versions

debian debian_linux
fedoraproject fedora
linux linux_kernel · 4.14 → 4.19.306
linux linux_kernel · 4.20 → 5.4.268
linux linux_kernel · 5.11 → 5.15.148
linux linux_kernel · 5.16 → 6.1.75
linux linux_kernel · 5.5 → 5.10.209
linux linux_kernel · 6.2 → 6.6.14
linux linux_kernel · 6.7 → 6.7.2

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References