CVE-2023-6679
published 2023-12-11CVE-2023-6679: A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c in the Digital Phase Locked Loop (DPLL)…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.31%
23.9th percentile
A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c in the Digital Phase Locked Loop (DPLL) subsystem in the Linux kernel. This issue could be exploited to trigger a denial of service.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | — | — |
| fedoraproject | fedora | — | — |
| redhat | enterprise_linux | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5LOW
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: NULL pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c
vendor_redhat·2023-12-11·CVSS 5.5
CVE-2023-6679 [MEDIUM] CWE-476 kernel: NULL pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c
kernel: NULL pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c
A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c in the Digital Phase Locked Loop (DPLL) subsystem in the Linux kernel. This issue could be exploited to trigger a denial of service.
A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c in the Digital Phase Locked Loop (DPLL) subsystem in the Linux kernel. This issue could be exploited to trigger a denial of service.
Mitigation: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread ins
Debian
CVE-2023-6679: linux - A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() ...
vendor_debian·2023·CVSS 5.5
CVE-2023-6679 [MEDIUM] CVE-2023-6679: linux - A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() ...
A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c in the Digital Phase Locked Loop (DPLL) subsystem in the Linux kernel. This issue could be exploited to trigger a denial of service.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
OSV
CVE-2023-6679: A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink
osv·2023-12-11·CVSS 5.5
CVE-2023-6679 [MEDIUM] CVE-2023-6679: A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink
A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c in the Digital Phase Locked Loop (DPLL) subsystem in the Linux kernel. This issue could be exploited to trigger a denial of service.
GHSA
GHSA-9vh7-c87x-8q9v: A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink
ghsa_unreviewed·2023-12-11
CVE-2023-6679 [MEDIUM] CWE-476 GHSA-9vh7-c87x-8q9v: A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink
A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c in the Digital Phase Locked Loop (DPLL) subsystem in the Linux kernel. This issue could be exploited to trigger a denial of service.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2023-6679 kernel: NULL pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c
bugzilla·2023-12-11·CVSS 5.5
CVE-2023-6679 [MEDIUM] CVE-2023-6679 kernel: NULL pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c
CVE-2023-6679 kernel: NULL pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c
A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c in Digital Phase Locked Loop (DPLL) subsystem in the Linux kernel, which could be exploited to trigger denial of service.
Refer:
https://lore.kernel.org/netdev/[email protected]/
Discussion:
Created kernel tracking bugs for this issue:
Affects: fedora-all [bug 2253987]
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 9
Via RHSA-2024:0461 https://access.redhat.com/errata/RHSA-2024:0461
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 9.2 Extended Update Support
Via RH
Bugzilla
CVE-2023-27538 curl: SSH connection too eager reuse still
bugzilla·2023-03-16·CVSS 5.5
CVE-2023-27538 [MEDIUM] CVE-2023-27538 curl: SSH connection too eager reuse still
CVE-2023-27538 curl: SSH connection too eager reuse still
libcurl would reuse a previously created connection even when an SSH related option had been changed that should have prohibited reuse. libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However, two SSH settings were left out from the configuration match checks, making them match too easily.
Discussion:
Created curl tracking bugs for this issue:
Affects: fedora-all [bug 2180435]
Created mingw-curl tracking bugs for this issue:
Affects: fedora-all [bug 2180437]
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 9
Via RHSA-2023:6679 https://access.redhat.com/errata/RHSA-2023:6679
---
This issue has been addr
https://access.redhat.com/errata/RHSA-2024:0439https://access.redhat.com/errata/RHSA-2024:0448https://access.redhat.com/errata/RHSA-2024:0461https://access.redhat.com/security/cve/CVE-2023-6679https://bugzilla.redhat.com/show_bug.cgi?id=2253986https://lore.kernel.org/netdev/[email protected]/https://access.redhat.com/errata/RHSA-2024:0439https://access.redhat.com/errata/RHSA-2024:0448https://access.redhat.com/errata/RHSA-2024:0461https://access.redhat.com/security/cve/CVE-2023-6679https://bugzilla.redhat.com/show_bug.cgi?id=2253986https://lists.fedoraproject.org/archives/list/[email protected]/message/7LSPIOMIJYTLZB6QKPQVVAYSUETUWKPF/https://lists.fedoraproject.org/archives/list/[email protected]/message/LBVHM4LGMFIHBN4UBESYRFMYX3WUICV5/https://lore.kernel.org/netdev/[email protected]/
2023-12-11
Published