Wind River Support Network

HomeDefectsLIN1022-3621
Fixed

LIN1022-3621 : Security Advisory - linux - CVE-2023-28327

Created: Mar 14, 2023    Updated: Apr 20, 2023
Resolved Date: Mar 22, 2023
Found In Version: 10.22.33.1
Fix Version: 10.22.33.4
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Kernel

Description

A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unix_diag_get_exact in the Linux Kernel. The newly allocated skb does not have sk, leading to a NULL pointer. This flaw allows a local user to crash or potentially cause a denial of service.

https://nvd.nist.gov/vuln/detail/CVE-2023-28327

CVEs


Live chat
Online