CVE-2023-6915CWE-476

CVE-2023-6915

Medium · published January 15, 2024

CVSS v3.1
6.2
EPSS
0%
Percentile
16.5
In the wild
Unconfirmed
What it is

A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00258 · 16.5th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2024-01-15T15:15Z
Affected products (76)
ProductVersionsFixed in
debian/debian_linuxall versions—
redhat/codeready_linux_builderall versions—
redhat/codeready_linux_builder_for_arm64all versions—
redhat/codeready_linux_builder_for_power_little_endianall versions—
redhat/codeready_linux_builder_for_power_little_endian_elsall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linux_for_elsall versions—
redhat/enterprise_linux_for_elsall versions—
redhat/enterprise_linux_for_ibm_z_systemsall versions—
redhat/enterprise_linux_for_ibm_z_systems_elsall versions—
redhat/enterprise_linux_for_power_little_endianall versions—
redhat/enterprise_linux_for_elsall versions—
redhat/enterprise_linux_for_real_timeall versions—
redhat/enterprise_linux_for_real_time_for_nfvall versions—
redhat/enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsall versions—
redhat/enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsall versions—
redhat/enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsall versions—
redhat/enterprise_linux_update_services_for_sap_solutionsall versions—
redhat/enterprise_linux_update_services_for_sap_solutionsall versions—
redhat/enterprise_linux_update_services_for_sap_solutionsall versions—
redhat/codeready_linux_builderall versions—
redhat/codeready_linux_builderall versions—
redhat/codeready_linux_builder_for_eusall versions—
redhat/codeready_linux_builder_for_eusall versions—
redhat/codeready_linux_builder_for_eusall versions—
redhat/codeready_linux_builder_for_eusall versions—
redhat/codeready_linux_builder_for_eusall versions—
redhat/codeready_linux_builder_for_eusall versions—
redhat/codeready_linux_builder_for_ibm_z_systemsall versions—
redhat/codeready_linux_builder_for_ibm_z_systems_eusall versions—
redhat/codeready_linux_builder_for_ibm_z_systems_eusall versions—
redhat/codeready_linux_builder_for_ibm_z_systems_eusall versions—
redhat/codeready_linux_builder_for_power_little_endianall versions—
redhat/codeready_linux_builder_for_power_little_endian_eusall versions—
redhat/codeready_linux_builder_for_power_little_endian_eusall versions—
redhat/codeready_linux_builder_for_power_little_endian_eusall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linux_eusall versions—
redhat/enterprise_linux_eusall versions—
redhat/enterprise_linux_eusall versions—
redhat/enterprise_linux_eusall versions—
redhat/enterprise_linux_eusall versions—
redhat/enterprise_linux_eusall versions—
redhat/enterprise_linux_for_elsall versions—
redhat/enterprise_linux_for_elsall versions—
redhat/enterprise_linux_for_elsall versions—
redhat/enterprise_linux_for_elsall versions—
redhat/enterprise_linux_for_elsall versions—
redhat/enterprise_linux_for_elsall versions—
redhat/enterprise_linux_for_ibm_z_systemsall versions—
redhat/enterprise_linux_for_ibm_z_systemsall versions—
redhat/enterprise_linux_for_ibm_z_systemsall versions—
redhat/enterprise_linux_for_ibm_z_systemsall versions—
redhat/enterprise_linux_for_ibm_z_systems_elsall versions—
redhat/enterprise_linux_for_ibm_z_systems_elsall versions—
redhat/enterprise_linux_for_ibm_z_systems_elsall versions—
redhat/enterprise_linux_for_ibm_z_systems_eusall versions—
redhat/enterprise_linux_for_ibm_z_systems_eusall versions—
redhat/enterprise_linux_for_ibm_z_systems_eusall versions—
redhat/enterprise_linux_for_power_little_endianall versions—
redhat/enterprise_linux_for_power_little_endian_elsall versions—
redhat/enterprise_linux_for_power_little_endian_elsall versions—
redhat/enterprise_linux_for_power_little_endian_elsall versions—
redhat/enterprise_linux_for_power_little_endian_eusall versions—
redhat/enterprise_linux_for_power_little_endian_eusall versions—
redhat/enterprise_linux_for_power_little_endian_eusall versions—
redhat/enterprise_linux_server_ausall versions—
redhat/enterprise_linux_server_ausall versions—
linux/linux_kernel< 6.6.136.6.13
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
References (13)
EPSS history
Timeline
  • 15 JAN 09:32Z
    Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c
    cvelistv5