Wind River Support Network

HomeDefectsLIN1021-5426
Fixed

LIN1021-5426 : Security Advisory - linux - CVE-2023-28327

Created: Mar 14, 2023    Updated: Apr 20, 2023
Resolved Date: Mar 15, 2023
Found In Version: 10.21.20.1
Fix Version: 10.21.20.15
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Kernel

Description

A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unix_diag_get_exact in the Linux Kernel. The newly allocated skb does not have sk, leading to a NULL pointer. This flaw allows a local user to crash or potentially cause a denial of service.

https://nvd.nist.gov/vuln/detail/CVE-2023-28327

CVEs


Live chat
Online