5.5 Medium

CVE-2023-4459 A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking…

Description

A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with normal user privilege to cause a denial of service due to a missing sanity check during cleanup.

Affected products and versions

Product	Affected versions	Fixed in
Red Hat Enterprise Linux 8.2 Advanced Update Support	Versions not published
Red Hat Enterprise Linux 8.2 Telecommunications Update Service	Versions not published
Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions	Versions not published
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Versions not published
Red Hat Enterprise Linux 8.4 Telecommunications Update Service	Versions not published
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	Versions not published
Red Hat Enterprise Linux 8.6 Extended Update Support	Versions not published
Red Hat Enterprise Linux 9.0 Extended Update Support	Versions not published
Red Hat Virtualization 4 for Red Hat Enterprise Linux 8	Versions not published

Show the 4 other branches

Product	Affected versions	Fixed in
Red Hat Enterprise Linux 6	Versions not published
Red Hat Enterprise Linux 7	Versions not published
Red Hat Enterprise Linux 8	Versions not published
Red Hat Enterprise Linux 9	Versions not published

References

RHSA-2024:0412 access.redhat.com
RHSA-2024:1250 access.redhat.com
RHSA-2024:1306 access.redhat.com
RHSA-2024:1367 access.redhat.com
RHSA-2024:1382 access.redhat.com
RHSA-2024:2006 access.redhat.com
RHSA-2024:2008 access.redhat.com
access.redhat.com access.redhat.com
RHBZ#2219268 bugzilla.redhat.com
github.com github.com

Timeline

Published August 21, 2023
Last modified October 8, 2026

The 213 CVEs of Red Hat Enterprise Linux 8.2 Advanced Update Support →

CVE-2026-22016 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE… 7.5 High CVE-2026-5734 Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1 8.1 High CVE-2026-5731 Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and… 9.8 Critical CVE-2026-5201 Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image 7.5 High

Track this CVE