Wind River Support Network

HomeDefectsLIN1022-4059
Acknowledged

LIN1022-4059 : Security Advisory - linux - CVE-2023-2176

Created: Apr 20, 2023    Updated: Nov 18, 2024
Resolved Date: Jan 4, 2024
Found In Version: 10.22.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Kernel

Description

A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to crash the system or escalation of privilege.

https://nvd.nist.gov/vuln/detail/CVE-2023-2176

CVEs


Live chat
Online