NetSight
IP …
high7.8

CVE-2023-3812

An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networkin…

Impact

An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.15 before 4.19.265
from 4.20 before 5.4.224
from 5.5 before 5.10.154
from 5.11 before 5.15.78
from 5.16 before 6.0.8
RedhatEnterprise Linux
Versions 8.0, 9.0

Weakness classification

CWE-787CWE-416

References