CVE-2023-3338 — NULL Pointer Dereference in Kernel

CWE-476 — NULL Pointer Dereference17 documents7 sources
Severity
6.5MEDIUMNVD
OSV5.7OSV4.1
EPSS
9.2%
top 7.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
11
Linux KernelDebian LinuxDebian Linux+8 more
Timeline
PublishedJun 30
Latest updateOct 24

Description

A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue could allow a remote user to crash the system.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages12 packages

▶Debianlinux/linux_kernel< 5.10.191-1+3
▶Ubuntulinux/linux_kernel< 5.4.0-164.181+1
▶debiandebian/linux< linux 6.1.4-1 (bookworm)

Also affects: Debian Linux 10.0, 11.0

🔴Vulnerability Details

8
OSV
linux-intel-iotg-5.15 vulnerabilities↗2023-10-24
▶
OSV
linux-raspi vulnerabilities↗2023-10-19
▶
OSV
linux-intel-iotg vulnerabilities↗2023-10-19
▶
OSV
linux-hwe-5.15, linux-oracle-5.15 vulnerabilities↗2023-10-06
▶
OSV
linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-oracle, linu↗2023-10-04
▶

📋Vendor Advisories

8
Ubuntu
Linux kernel (Raspberry Pi) vulnerabilities↗2023-10-19
▶
Ubuntu
Linux kernel (Intel IoTG) vulnerabilities↗2023-10-19
▶
Ubuntu
Linux kernel vulnerabilities↗2023-10-06
▶
Ubuntu
Linux kernel vulnerabilities↗2023-10-04
▶
Ubuntu
Linux kernel vulnerabilities↗2023-10-04
▶
CVE-2023-3338 — NULL Pointer Dereference in Kernel | cvebase