CVE-2023-3812Out-of-bounds Write in Kernel

Severity
7.8HIGHNVD
EPSS
0.0%
top 99.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJul 24
Latest updateFeb 14

Description

An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages3 packages

NVDlinux/linux_kernel4.154.19.265+4
Debianlinux/linux_kernel< 5.10.158-1+3
Palo Altopaloalto/pan-os

Also affects: Enterprise Linux 8.0, 9.0

Patches

🔴Vulnerability Details

3
GHSA
GHSA-v4mv-7g6h-5vh8: An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big)2023-07-24
CVEList
Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags2023-07-24
OSV
CVE-2023-3812: An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big)2023-07-24

📋Vendor Advisories

4
Palo Alto
PAN-SA-2024-0001 Informational Bulletin: Impact of OSS CVEs in PAN-OS2024-02-14
Microsoft
Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags2023-07-11
Debian
CVE-2023-3812: linux - An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP devi...2023
Red Hat
kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags2022-10-22

💬Community

1
Bugzilla
CVE-2023-3812 kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags2023-07-19