CVE-2023-6915

2024-01-1510:15:26

CWE-476

[email protected]

web.nvd.nist.gov

null pointer

dereference

linux kernel

denial of service

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

Percentile

5.1%

JSON

A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return.

Affected configurations

Nvd

Node

linuxlinux_kernelRange<6.7

linuxlinux_kernelMatch6.7rc7

linuxlinux_kernelMatch6.7rc8

Node

redhatenterprise_linuxMatch8.0

redhatenterprise_linuxMatch9.0

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel6.7cpe:2.3:o:linux:linux_kernel:6.7:rc7:*:*:*:*:*:*
linuxlinux_kernel6.7cpe:2.3:o:linux:linux_kernel:6.7:rc8:*:*:*:*:*:*
redhatenterprise_linux8.0cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
redhatenterprise_linux9.0cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	*	cpe:2.3:o:linux:linux_kernel::::::::
linux	linux_kernel	6.7	cpe:2.3:o:linux:linux_kernel:6.7:rc7::::::
linux	linux_kernel	6.7	cpe:2.3:o:linux:linux_kernel:6.7:rc8::::::
redhat	enterprise_linux	8.0	cpe:2.3:o:redhat:enterprise_linux:8.0:::::::*
redhat	enterprise_linux	9.0	cpe:2.3:o:redhat:enterprise_linux:9.0:::::::*