5.5
Medium
CVE-2023-42752 An integer overflow flaw was found in the Linux kernel
Description
An integer overflow flaw was found in the Linux kernel. This issue leads to the kernel allocating `skb_shared_info` in the userspace, which is exploitable in systems without SMAP protection since `skb_shared_info` contains references to function pointers.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| kernel 6.6 | earliest → < 6.6-rc1 | 6.6-rc1 |
| Red Hat Enterprise Linux 6 | Versions not published | |
| Red Hat Enterprise Linux 7 | Versions not published | |
| Red Hat Enterprise Linux 8 | Versions not published | |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Fedora | Versions not published |
References
- packetstormsecurity.com packetstormsecurity.com
- access.redhat.com access.redhat.com
- RHBZ#2239828 bugzilla.redhat.com
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
Timeline
- Published
- Last modified
Other CVEs of kernel
The 279 CVEs of kernel →
CVE-2024-1312
A use-after-free flaw was found in the Linux kernel's Memory Management subsystem when a user wins two races at the same…
5.1
Medium
CVE-2023-6200
A race condition was found in the Linux Kernel
7.5
High
CVE-2023-6560
An out-of-bounds memory access flaw was found in the io_uring SQ/CQ rings functionality in the Linux kernel
5.5
Medium
CVE-2023-5972
A null pointer dereference flaw was found in the nft_inner.c functionality of netfilter in the Linux kernel
7.0
High