NULL pointer dereference in Linux kernel - CVE-2023-3338

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU77704

NULL pointer dereference in Linux kernel - CVE-2023-3338

Published: June 26, 2023 / Updated: July 19, 2024


Vulnerability identifier: #VU77704
CSH Severity: Low
CVSS v4 BT: 5.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/U:Clear]
CVE-ID: CVE-2023-3338
CWE-ID: CWE-476
Exploitation vector: Local access
Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the DECnet socket in net/decnet/dn_nsp_out.c. A local user can trigger a NULL pointer dereference and perform a denial of service (DoS) attack.


Affected software

Linux kernel
Debian Linux
Slackware Linux
Ubuntu
openEuler
linux-image-oem (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-generic-hwe-18.04 (Ubuntu package)
linux-image-ibm (Ubuntu package)
linux-image-lowlatency-hwe-18.04 (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-raspi-hwe-18.04 (Ubuntu package)
linux-image-snapdragon-hwe-18.04 (Ubuntu package)
linux-image-virtual-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1058-ibm (Ubuntu package)
linux-image-5.4.0-1095-raspi (Ubuntu package)
linux-image-5.4.0-1110-oracle (Ubuntu package)
linux-image-5.4.0-1111-aws (Ubuntu package)
linux-image-5.4.0-1115-gcp (Ubuntu package)
linux-image-5.4.0-164-lowlatency (Ubuntu package)
linux-image-oem-osp1 (Ubuntu package)
linux-image-5.4.0-1117-azure (Ubuntu package)
linux-image-5.4.0-164-generic (Ubuntu package)
kernel-debugsource
python3-perf-debuginfo
perf-debuginfo
bpftool
python2-perf
kernel-tools-debuginfo
kernel
kernel-debuginfo
python3-perf
bpftool-debuginfo
perf
python2-perf-debuginfo
kernel-source
kernel-tools-devel
kernel-tools
kernel-devel
linux-image-lowlatency (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-5.4.0-164-generic-lpae (Ubuntu package)
linux-image-5.4.0-1023-iot (Ubuntu package)
linux-image-xilinx-zynqmp (Ubuntu package)
linux-image-5.4.0-1031-xilinx-zynqmp (Ubuntu package)
linux-image-ibm-lts-20.04 (Ubuntu package)
linux-image-bluefield (Ubuntu package)
linux-image-5.4.0-1072-bluefield (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-gkeop-5.4 (Ubuntu package)
linux-image-5.4.0-1078-gkeop (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-raspi2 (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-5.4.0-1100-kvm (Ubuntu package)
linux-image-oracle-lts-20.04 (Ubuntu package)
linux-image-aws-lts-20.04 (Ubuntu package)
linux-image-gcp-lts-20.04 (Ubuntu package)
linux-image-azure-lts-20.04 (Ubuntu package)
kernel-headers
linux (Debian package)
linux-image-generic-64k (Ubuntu package)
linux-image-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-86-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-86-lowlatency (Ubuntu package)
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-5.15.0-86-generic-lpae (Ubuntu package)
linux-image-5.15.0-86-generic-64k (Ubuntu package)
linux-image-5.15.0-86-generic (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-oem-20.04b (Ubuntu package)
linux-image-oem-20.04c (Ubuntu package)
linux-image-oem-20.04d (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-gkeop-5.15 (Ubuntu package)
linux-image-5.15.0-1030-gkeop (Ubuntu package)
linux-image-5.15.0-1037-nvidia-lowlatency (Ubuntu package)
linux-image-nvidia-lowlatency (Ubuntu package)
linux-image-nvidia (Ubuntu package)
linux-image-5.15.0-1037-nvidia (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-5.15.0-1040-raspi (Ubuntu package)
linux-image-5.15.0-1040-ibm (Ubuntu package)
linux-image-5.15.0-1043-intel-iotg (Ubuntu package)
linux-image-gcp-lts-22.04 (Ubuntu package)
linux-image-gke-5.15 (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-5.15.0-1044-kvm (Ubuntu package)
linux-image-5.15.0-1044-gke (Ubuntu package)
linux-image-5.15.0-1044-gcp (Ubuntu package)
linux-image-oracle-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1045-oracle (Ubuntu package)
linux-image-aws-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1047-aws (Ubuntu package)
linux-image-azure-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1049-azure-fde (Ubuntu package)
linux-image-5.15.0-1049-azure (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
linux-image-azure-cvm (Ubuntu package)
linux-image-azure-fde-lts-22.04 (Ubuntu package)
linux-5.15.139/kernel-generic
linux-5.15.139/kernel-huge
linux-5.15.139/kernel-modules
linux-5.15.139/kernel-headers
linux-image-intel-iotg (Ubuntu package)
linux-image-intel (Ubuntu package)
Dell EMC VxRail Appliance

How to mitigate CVE-2023-3338

Install updates from vendor's website.

Linux kernel - addressed in versions 4.14.319, 4.19.287, 5.4.248, 5.10.185, 5.15.118
linux-image-oem (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 5.4.0.164.161
linux-image-azure (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 5.15.0.1049.56~20.04.38
linux-image-aws (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 5.15.0.1047.52~20.04.35
linux-image-gcp (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 5.15.0.1044.52~20.04.1
linux-image-generic-hwe-18.04 (Ubuntu package) - update to Ubuntu Pro
linux-image-ibm (Ubuntu package) - addressed in versions Ubuntu Pro, 5.15.0.1040.36, 5.15.0.1040.43~20.04.12
linux-image-lowlatency-hwe-18.04 (Ubuntu package) - update to Ubuntu Pro
linux-image-oracle (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 5.15.0.1045.40, 5.15.0.1045.51~20.04.1
linux-image-raspi-hwe-18.04 (Ubuntu package) - update to Ubuntu Pro
linux-image-snapdragon-hwe-18.04 (Ubuntu package) - update to Ubuntu Pro
linux-image-virtual-hwe-18.04 (Ubuntu package) - update to Ubuntu Pro
linux-image-5.4.0-1058-ibm (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-1058.63
linux-image-5.4.0-1095-raspi (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-1095.106
linux-image-5.4.0-1110-oracle (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-1110.119
linux-image-5.4.0-1111-aws (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-1111.120
linux-image-5.4.0-1115-gcp (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-1115.124
linux-image-5.4.0-164-lowlatency (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-164.181
linux-image-oem-osp1 (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0.164.161
linux-image-5.4.0-1117-azure (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-1117.124
linux-image-5.4.0-164-generic (Ubuntu package) - addressed in versions Ubuntu Pro, 5.4.0-164.181
kernel-debugsource - addressed in versions 4.19.90-2307.4.0.0210, 5.10.0-60.103.0.130, 5.10.0-136.41.0.119, 5.10.0-153.19.0.95
python3-perf-debuginfo - addressed in versions 4.19.90-2307.4.0.0210, 5.10.0-60.103.0.130, 5.10.0-136.41.0.119, 5.10.0-153.19.0.95
perf-debuginfo - addressed in versions 4.19.90-2307.4.0.0210, 5.10.0-60.103.0.130, 5.10.0-136.41.0.119, 5.10.0-153.19.0.95
bpftool - addressed in versions 4.19.90-2307.4.0.0210, 5.10.0-60.103.0.130, 5.10.0-136.41.0.119, 5.10.0-153.19.0.95
python2-perf - update to 4.19.90-2307.4.0.0210
kernel-tools-debuginfo - addressed in versions 4.19.90-2307.4.0.0210, 5.10.0-60.103.0.130, 5.10.0-136.41.0.119, 5.10.0-153.19.0.95
kernel - addressed in versions 4.19.90-2307.4.0.0210, 5.10.0-60.103.0.130, 5.10.0-136.41.0.119, 5.10.0-153.19.0.95
kernel-debuginfo - addressed in versions 4.19.90-2307.4.0.0210, 5.10.0-60.103.0.130, 5.10.0-136.41.0.119, 5.10.0-153.19.0.95
python3-perf - addressed in versions 4.19.90-2307.4.0.0210, 5.10.0-60.103.0.130, 5.10.0-136.41.0.119, 5.10.0-153.19.0.95
bpftool-debuginfo - addressed in versions 4.19.90-2307.4.0.0210, 5.10.0-60.103.0.130, 5.10.0-136.41.0.119, 5.10.0-153.19.0.95
perf - addressed in versions 4.19.90-2307.4.0.0210, 5.10.0-60.103.0.130, 5.10.0-136.41.0.119, 5.10.0-153.19.0.95
python2-perf-debuginfo - update to 4.19.90-2307.4.0.0210
kernel-source - addressed in versions 4.19.90-2307.4.0.0210, 5.10.0-60.103.0.130, 5.10.0-136.41.0.119, 5.10.0-153.19.0.95
kernel-tools-devel - addressed in versions 4.19.90-2307.4.0.0210, 5.10.0-60.103.0.130, 5.10.0-136.41.0.119, 5.10.0-153.19.0.95
kernel-tools - addressed in versions 4.19.90-2307.4.0.0210, 5.10.0-60.103.0.130, 5.10.0-136.41.0.119, 5.10.0-153.19.0.95
kernel-devel - addressed in versions 4.19.90-2307.4.0.0210, 5.10.0-60.103.0.130, 5.10.0-136.41.0.119, 5.10.0-153.19.0.95
linux-image-lowlatency (Ubuntu package) - addressed in versions 5.4.0.164.161, 5.15.0.86.88
linux-image-generic-lpae (Ubuntu package) - addressed in versions 5.4.0.164.161, 5.15.0.86.83
linux-image-generic (Ubuntu package) - addressed in versions 5.4.0.164.161, 5.15.0.86.83
linux-image-virtual (Ubuntu package) - addressed in versions 5.4.0.164.161, 5.15.0.86.83
linux-image-5.4.0-164-generic-lpae (Ubuntu package) - update to 5.4.0-164.181
linux-image-5.4.0-1023-iot (Ubuntu package) - update to 5.4.0-1023.24
linux-image-xilinx-zynqmp (Ubuntu package) - update to 5.4.0.1031.32
linux-image-5.4.0-1031-xilinx-zynqmp (Ubuntu package) - update to 5.4.0-1031.35
linux-image-ibm-lts-20.04 (Ubuntu package) - update to 5.4.0.1058.87
linux-image-bluefield (Ubuntu package) - update to 5.4.0.1072.67
linux-image-5.4.0-1072-bluefield (Ubuntu package) - update to 5.4.0-1072.78
linux-image-gkeop (Ubuntu package) - addressed in versions 5.4.0.1078.76, 5.15.0.1030.29
linux-image-gkeop-5.4 (Ubuntu package) - update to 5.4.0.1078.76
linux-image-5.4.0-1078-gkeop (Ubuntu package) - update to 5.4.0-1078.82
linux-image-raspi (Ubuntu package) - addressed in versions 5.4.0.1095.125, 5.15.0.1040.38
linux-image-raspi2 (Ubuntu package) - update to 5.4.0.1095.125
linux-image-kvm (Ubuntu package) - addressed in versions 5.4.0.1100.95, 5.15.0.1044.40
linux-image-5.4.0-1100-kvm (Ubuntu package) - update to 5.4.0-1100.106
linux-image-oracle-lts-20.04 (Ubuntu package) - update to 5.4.0.1110.103
linux-image-aws-lts-20.04 (Ubuntu package) - update to 5.4.0.1111.108
linux-image-gcp-lts-20.04 (Ubuntu package) - update to 5.4.0.1115.117
linux-image-azure-lts-20.04 (Ubuntu package) - update to 5.4.0.1117.110
kernel-headers - addressed in versions 5.10.0-60.103.0.130, 5.10.0-136.41.0.119, 5.10.0-153.19.0.95
linux (Debian package) - update to 5.10.191-1
linux-image-generic-64k (Ubuntu package) - update to 5.15.0.86.83
linux-image-lowlatency-64k (Ubuntu package) - update to 5.15.0.86.88
linux-image-5.15.0-86-lowlatency-64k (Ubuntu package) - update to 5.15.0-86.95~20.04.1
linux-image-5.15.0-86-lowlatency (Ubuntu package) - update to 5.15.0-86.95~20.04.1
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.86.95~20.04.41
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.15.0.86.95~20.04.41
linux-image-5.15.0-86-generic-lpae (Ubuntu package) - addressed in versions 5.15.0-86.96, 5.15.0-86.96~20.04.1
linux-image-5.15.0-86-generic-64k (Ubuntu package) - addressed in versions 5.15.0-86.96, 5.15.0-86.96~20.04.1
linux-image-5.15.0-86-generic (Ubuntu package) - addressed in versions 5.15.0-86.96, 5.15.0-86.96~20.04.1
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.86.96~20.04.44
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.15.0.86.96~20.04.44
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.15.0.86.96~20.04.44
linux-image-oem-20.04 (Ubuntu package) - update to 5.15.0.86.96~20.04.44
linux-image-oem-20.04b (Ubuntu package) - update to 5.15.0.86.96~20.04.44
linux-image-oem-20.04c (Ubuntu package) - update to 5.15.0.86.96~20.04.44
linux-image-oem-20.04d (Ubuntu package) - update to 5.15.0.86.96~20.04.44
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.15.0.86.96~20.04.44
linux-image-gkeop-5.15 (Ubuntu package) - addressed in versions 5.15.0.1030.29, 5.15.0.1030.35~20.04.26
linux-image-5.15.0-1030-gkeop (Ubuntu package) - update to 5.15.0-1030.35~20.04.1
linux-image-5.15.0-1037-nvidia-lowlatency (Ubuntu package) - update to 5.15.0-1037.37
linux-image-nvidia-lowlatency (Ubuntu package) - update to 5.15.0.1037.37
linux-image-nvidia (Ubuntu package) - update to 5.15.0.1037.37
linux-image-5.15.0-1037-nvidia (Ubuntu package) - update to 5.15.0-1037.37
linux-image-raspi-nolpae (Ubuntu package) - update to 5.15.0.1040.38
linux-image-5.15.0-1040-raspi (Ubuntu package) - update to 5.15.0-1040.43
linux-image-5.15.0-1040-ibm (Ubuntu package) - update to 5.15.0-1040.43~20.04.1
linux-image-intel-iotg (Ubuntu package) - addressed in versions 5.15.0.1043.43, 5.15.0.1043.49~20.04.33
linux-image-5.15.0-1043-intel-iotg (Ubuntu package) - addressed in versions 5.15.0-1043.49, 5.15.0-1043.49~20.04.1
linux-image-intel (Ubuntu package) - update to 5.15.0.1043.49~20.04.33
linux-image-gcp-lts-22.04 (Ubuntu package) - update to 5.15.0.1044.40
linux-image-gke-5.15 (Ubuntu package) - update to 5.15.0.1044.43
linux-image-gke (Ubuntu package) - update to 5.15.0.1044.43
linux-image-5.15.0-1044-kvm (Ubuntu package) - update to 5.15.0-1044.49
linux-image-5.15.0-1044-gke (Ubuntu package) - update to 5.15.0-1044.49
linux-image-5.15.0-1044-gcp (Ubuntu package) - update to 5.15.0-1044.52~20.04.1
linux-image-oracle-lts-22.04 (Ubuntu package) - update to 5.15.0.1045.40
linux-image-5.15.0-1045-oracle (Ubuntu package) - addressed in versions 5.15.0-1045.51, 5.15.0-1045.51~20.04.1
linux-image-aws-lts-22.04 (Ubuntu package) - update to 5.15.0.1047.46
linux-image-5.15.0-1047-aws (Ubuntu package) - update to 5.15.0-1047.52~20.04.1
linux-image-azure-lts-22.04 (Ubuntu package) - update to 5.15.0.1049.45
linux-image-5.15.0-1049-azure-fde (Ubuntu package) - addressed in versions 5.15.0-1049.56.1, 5.15.0-1049.56~20.04.1.1
linux-image-5.15.0-1049-azure (Ubuntu package) - update to 5.15.0-1049.56~20.04.1
linux-image-azure-fde (Ubuntu package) - update to 5.15.0.1049.56~20.04.1.27
linux-image-azure-cvm (Ubuntu package) - update to 5.15.0.1049.56~20.04.38
linux-image-azure-fde-lts-22.04 (Ubuntu package) - update to 5.15.0.1049.56.27
linux-5.15.139/kernel-generic - update to 5.15.139
linux-5.15.139/kernel-huge - update to 5.15.139
linux-5.15.139/kernel-modules - update to 5.15.139
linux-5.15.139/kernel-headers - update to 5.15.139_smp
Dell EMC VxRail Appliance - update to 8.0.120

External References

Related Security Bulletins