NetSight
IP …
medium5.5

CVE-2023-4459

A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Ke…

Impact

A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with normal user privilege to cause a denial of service due to a missing sanity check during cleanup.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 5.18
RedhatEnterprise Linux
Versions 8.0, 9.0

Weakness classification

CWE-476

References