cbcvebase.
CVE-2023-39194
published 2023-10-09

CVE-2023-39194: A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past…

medium4.4CVSS 3.1
AVLACLPRHUINSUCHINAN
A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past the end of an allocated buffer. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, potentially leading to an information disclosure.

Affected

17 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.52-1 (bookworm)linux 6.1.52-1 (bookworm)
fedoraprojectfedora
linuxlinux_kernel< 6.56.5
linuxlinux_kernel
linuxlinux_kernel>= 0 < 5.10.197-15.10.197-1
linuxlinux_kernel>= 0 < 6.1.52-16.1.52-1
linuxlinux_kernel>= 0 < 6.4.13-16.4.13-1
linuxlinux_kernel>= 0 < 6.4.13-16.4.13-1
linuxlinux_kernel>= 0 < 5.4.0-169.1875.4.0-169.187
linuxlinux_kernel>= 0 < 5.15.0-91.1015.15.0-91.101
linuxlinux_kernel>= 0 < 4.4.0-248.2824.4.0-248.282
linuxlinux_kernel>= 0 < 4.15.0-220.2314.15.0-220.231
msrccbl2_kernel_5.15.135.1-2_on_cbl_mariner_2.0
redhatenterprise_linux
redhatenterprise_linux
ubuntulinux-gcp
ubuntulinux-kvm

CVSS provenance

nvdv3.14.4MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
osv5.5MEDIUM