5.5
Medium
CVE-2023-2166 A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux
Description
A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in the receive path of CAN frames. A local user could use this flaw to crash the system or potentially cause a denial of service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux | Versions not published |
References
- lore.kernel.org lore.kernel.org
Timeline
- Published
- Last modified
Other CVEs of Linux
The 7 CVEs of Linux →
CVE-2023-2177
A null pointer dereference issue was found in the sctp network protocol in net/sctp/stream_sched.c in Linux Kernel
5.5
Medium
CVE-2023-28327
A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unix_diag_get_exact in the Linux…
5.5
Medium
CVE-2023-28328
A NULL pointer dereference flaw was found in the az6027 driver in drivers/media/usb/dev-usb/az6027.c in the Linux Kernel
5.5
Medium
CVE-2023-1990
A use-after-free flaw was found in ndlc_remove in drivers/nfc/st-nci/ndlc.c in the Linux Kernel
4.7
Medium