Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2023-28466
HistoryMar 16, 2023 - 12:15 a.m.

CVE-2023-28466

2023-03-1600:15:11
CWE-476
[email protected]
web.nvd.nist.gov
2
linux kernel
tls
race condition
cve-2023-28466
use after free
null pointer

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference).

Affected configurations

NVD
Node
linuxlinux_kernelRange4.13–5.4.240
OR
linuxlinux_kernelRange5.5–5.10.177
OR
linuxlinux_kernelRange5.11–5.15.105
OR
linuxlinux_kernelRange5.16–6.1.20
OR
linuxlinux_kernelRange6.2–6.2.7
Node
netapph300sMatch-
OR
netapph410cMatch-
OR
netapph410sMatch-
OR
netapph500sMatch-
OR
netapph700sMatch-
Node
debiandebian_linuxMatch10.0

Related

osv 19
nessus 84
almalinux 4
ubuntucve 1
rocky 2
debiancve 1
cve 1
redhat 10
oraclelinux 2
cbl_mariner 2
prion 1
ibm 5
cvelist 1
redhatcve 1
openvas 33
amazon 3
photon 4
ubuntu 14
mageia 2
debian 1
slackware 1
ics 1
osv
osv
Moderate: kernel security, bug fix, and enhancement update
2023-08-31 16:54:20
Moderate: kernel-rt security and bug fix update
2023-08-31 16:54:43
Moderate: kernel-rt security and bug fix update
2023-06-27 00:00:00
nessus
nessus
RHEL 8 : kernel-rt (RHSA-2023:3819)
2023-06-27 00:00:00
RHEL 8 : kernel (RHSA-2023:3847)
2023-06-27 00:00:00
Rocky Linux 8 : kernel-rt (RLSA-2023:3819)
2023-08-31 00:00:00
almalinux
almalinux
Moderate: kernel security, bug fix, and enhancement update
2023-06-27 00:00:00
Moderate: kernel-rt security and bug fix update
2023-06-27 00:00:00
Important: kernel security and bug fix update
2023-06-21 00:00:00
ubuntucve
ubuntucve
CVE-2023-28466
2023-03-16 00:00:00
rocky
rocky
kernel-rt security and bug fix update
2023-08-31 16:54:43
kernel security, bug fix, and enhancement update
2023-08-31 16:54:20
debiancve
debiancve
CVE-2023-28466
2023-03-16 00:15:11
cve
cve
CVE-2023-28466
2023-03-16 00:15:11
redhat
redhat
(RHSA-2023:3819) Moderate: kernel-rt security and bug fix update
2023-06-27 13:35:31
(RHSA-2023:3847) Moderate: kernel security, bug fix, and enhancement update
2023-06-27 13:36:07
(RHSA-2023:4814) Important: kernel-rt security and bug fix update
2023-08-29 07:29:39
oraclelinux
oraclelinux
kernel security, bug fix, and enhancement update
2023-07-25 00:00:00
kernel security and bug fix update
2023-07-25 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-28466 affecting package kernel 5.10.174.1-1
2023-05-03 19:35:26
CVE-2023-28466 affecting package kernel for versions less than 5.15.107.1-2
2023-05-03 16:08:28
prion
prion
Race condition
2023-03-16 00:15:00
ibm
ibm
Security Bulletin: Linux Kernel vulnerability may affect IBM Elastic Storage System (CVE-2023-28466)
2023-12-04 17:01:04
Security Bulletin: IBM MQ Appliance is affected by a Linux Kernel vulnerability (CVE-2023-28466)
2024-04-26 19:49:02
Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Spectrum Copy Data Management
2023-07-28 15:34:05
cvelist
cvelist
CVE-2023-28466
2023-03-15 00:00:00
redhatcve
redhatcve
CVE-2023-28466
2023-03-16 12:43:37
openvas
openvas
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2023-1806)
2023-05-09 00:00:00
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2023-2335)
2023-07-10 00:00:00
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2023-2513)
2023-08-01 00:00:00
amazon
amazon
Important: kernel
2023-06-21 19:11:00
Important: kernel
2023-06-21 19:11:00
Important: kernel
2023-06-21 19:11:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-3.0-0595
2023-06-11 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0608
2023-07-05 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0406
2023-06-09 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2023-08-28 00:00:00
Linux kernel vulnerabilities
2023-08-29 00:00:00
Linux kernel (Azure) vulnerabilities
2023-09-04 00:00:00
mageia
mageia
Updated kernel-linus packages fix security vulnerability
2023-04-17 22:52:59
Updated kernel packages fix security vulnerability
2023-04-17 22:52:59
debian
debian
[SECURITY] [DLA 3404-1] linux-5.10 security update
2023-05-02 22:45:59
slackware
slackware
[slackware-security] Slackware 15.0 kernel
2023-06-22 01:56:18
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON
Related for NVD:CVE-2023-28466
osv19nessus84almalinux4ubuntucve1rocky2debiancve1cve1redhat10oraclelinux2cbl_mariner2prion1ibm5cvelist1redhatcve1openvas33amazon3photon4ubuntu14mageia2debian1slackware1ics1