Severity
High
Analysis Summary
CVE-2023-0122 CVSS:7.5
Linux Kernel is vulnerable to a denial of service, caused by a NULL pointer dereference flaw in the nvmet_setup_auth function in drivers/nvme/target/auth.c. By sending a specially-crafted request, a remote attacker could exploit this vulnerability to cause a denial of service condition.
CVE-2023-0179 CVSS:7.8
Linux Kernel could allow a local authenticated attacker to gain elevated privileges on the system, caused by a stack-based buffer overflow in the Netfilter subsystem. By executing a specially-crafted program, an authenticated attacker could exploit this vulnerability to gain elevated privileges as root.
CVE-2023-23559 CVSS:9.8
Linux Kernel could allow a remote attacker to execute arbitrary code on the system, caused by an integer overflow in the rndis_query_oid function in drivers/net/wireless/rndis_wlan.c. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system.
CVE-2023-23455 CVSS:6.2
Linux Kernel is vulnerable to a denial of service, caused by a type confusion flaw in the atm_tc_enqueue function in net/sched/sch_atm.c. By sending a specially-crafted request, a local attacker could exploit this vulnerability to cause a denial of service condition.
CVE-2023-23454 CVSS:6.2
Linux Kernel is vulnerable to a denial of service, caused by a slab-out-of-bounds read flaw in the cbq_classify function in net/sched/sch_cbq.c. By sending a specially-crafted request, a local attacker could exploit this vulnerability to cause a denial of service condition.
CVE-2022-4842 CVSS:5.5
Linux Kernel is vulnerable to a denial of service, caused by a NULL pointer dereference flaw in the attr_punch_hole() function in the NTFS3 driver. By sending a specially-crafted request, a local authenticated attacker could exploit this vulnerability to cause system to crash.
Impact
- Denial of Service
- Privilege Escalation
- Integer Overflow
Indicators Of Compromise
CVE
- CVE-2023-0122
- CVE-2023-0179
- CVE-2023-23559
- CVE-2023-23455
- CVE-2023-23454
- CVE-2022-4842
Affected Vendors
Linux
Affected Products
- Linux Kernel 6.0-rc2
- Linux Kernel 6.0-rc1
- Linux Kernel 6.0-rc3
- Linux Kernel 6.2-rc1
- Linux Kernel
- Linux Kernel 6.1.4
Remediation
Refer to Linux Kernel GIT Repository for patch, upgrade or suggested workaround information.