CVE-2023-1382: Null Pointer Dereference

Published Nov 18, 2022
·
Updated

A data race flaw was found in the Linux kernel, between where con is allocated and con->sock is set. This issue leads to a NULL pointer dereference when accessing con->sock->sk in net/tipc/topsrv.c in the tipc protocol in the Linux kernel.

Other sources

A data race happens between con is allocated and con->sock is set, leading to null pointer dereference when accessing con->sock->sk. The null pointer dereference issue was found in tipc protocol in net/tipc/topsrv.c in Linux before 6.0.

Reference: https://lore.kernel.org/netdev/bc7bd3183f1c275c820690fc65b708238fe9e38e.1668807842.git.lucien.xin@gmail.com/T/#u

— Red Hat

Linux Kernel is vulnerable to a denial of service, caused by a NULL pointer dereference flaw when accessing con->sock->sk in net/tipc/topsrv.c in the tipc protocol. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause the system to crash.

— IBM

Affected Software

146 affected componentsFixes available
redhat/kernel<0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
redhat/kernel-rt<0:5.14.0-284.11.1.rt14.296.el9_2
0:5.14.0-284.11.1.rt14.296.el9_2
Linux Linux kernel<6.1
Linux Linux kernel=6.1-rc1
Linux Linux kernel=6.1-rc2
Linux Linux kernel=6.1-rc3
Linux Linux kernel=6.1-rc4
Linux Linux kernel=6.1-rc5
Linux Linux kernel=6.1-rc6
IBM Security Verify Governance, Identity Manager software component<=ISVG 10.0.2
IBM Security Verify Governance, Identity Manager virtual appliance component<=ISVG 10.0.2
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1
redhat/kernel<6.1
6.1
ubuntu/linux-aws<4.4.0-1130.136
4.4.0-1130.136
ubuntu/linux-azure<4.15.0-1176.191~14.04.1
4.15.0-1176.191~14.04.1
ubuntu/linux-lts-xenial<4.4.0-253.287~14.04.1
4.4.0-253.287~14.04.1
ubuntu/linux*
ubuntu/linux<4.4.0-253.287
4.4.0-253.287
ubuntu/linux-aws<4.4.0-1168.183
4.4.0-1168.183
ubuntu/linux-aws-hwe<4.15.0-1167.180~16.04.1
4.15.0-1167.180~16.04.1
ubuntu/linux-azure<4.15.0-1176.191~16.04.1
4.15.0-1176.191~16.04.1
ubuntu/linux-gcp<4.15.0-1161.178~16.04.1
4.15.0-1161.178~16.04.1
ubuntu/linux-hwe<4.15.0-224.236~16.04.1
4.15.0-224.236~16.04.1
ubuntu/linux-kvm<4.4.0-1131.141
4.4.0-1131.141
ubuntu/linux-oracle<4.15.0-1130.141~16.04.1
4.15.0-1130.141~16.04.1
ubuntu/linux-hwe-edge*
ubuntu/linux-fips<4.4.0-1100.107
4.4.0-1100.107
ubuntu/linux-fips*
ubuntu/linux-aws-5.4<5.4.0-1097.105~18.04.1
5.4.0-1097.105~18.04.1
ubuntu/linux-azure-5.4<5.4.0-1104.110~18.04.1
5.4.0-1104.110~18.04.1
ubuntu/linux-gcp-5.4<5.4.0-1101.110~18.04.1
5.4.0-1101.110~18.04.1
ubuntu/linux-hwe-5.4<5.4.0-144.161~18.04.1
5.4.0-144.161~18.04.1
ubuntu/linux-ibm-5.4<5.4.0-1045.50~18.04.1
5.4.0-1045.50~18.04.1
ubuntu/linux-oracle-5.4<5.4.0-1094.103~18.04.1
5.4.0-1094.103~18.04.1
ubuntu/linux-raspi-5.4<5.4.0-1081.92~18.04.1
5.4.0-1081.92~18.04.1
ubuntu/linux<4.15.0-224.236
4.15.0-224.236
ubuntu/linux-aws<4.15.0-1167.180
4.15.0-1167.180
ubuntu/linux-aws-5.0*
ubuntu/linux-aws-5.3*
ubuntu/linux-azure*
ubuntu/linux-azure-4.15<4.15.0-1176.191
4.15.0-1176.191
ubuntu/linux-azure-5.3*
ubuntu/linux-azure-edge*
ubuntu/linux-gcp*
ubuntu/linux-gcp-4.15<4.15.0-1161.178
4.15.0-1161.178
ubuntu/linux-gcp-5.3*
ubuntu/linux-gke-4.15*
ubuntu/linux-gke-5.4*
ubuntu/linux-gkeop-5.4*
ubuntu/linux-hwe*
ubuntu/linux-hwe-edge*
ubuntu/linux-kvm<4.15.0-1151.156
4.15.0-1151.156
ubuntu/linux-oem*
ubuntu/linux-oracle<4.15.0-1130.141
4.15.0-1130.141
ubuntu/linux-oracle-5.0*
ubuntu/linux-oracle-5.3*
ubuntu/linux-aws-fips<4.15.0-2106.112
4.15.0-2106.112
ubuntu/linux-azure-fips<4.15.0-2085.91
4.15.0-2085.91
ubuntu/linux-fips<4.15.0-1122.133
4.15.0-1122.133
ubuntu/linux-gcp-fips<4.15.0-2069.74
4.15.0-2069.74
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/linux<5.4.0-144.161
5.4.0-144.161
ubuntu/linux-aws<5.4.0-1097.105
5.4.0-1097.105
ubuntu/linux-aws-5.15<5.15.0-1031.35~20.04.1
5.15.0-1031.35~20.04.1
ubuntu/linux-azure<5.4.0-1104.110
5.4.0-1104.110
ubuntu/linux-azure-5.15<5.15.0-1034.41~20.04.1
5.15.0-1034.41~20.04.1
ubuntu/linux-bluefield<5.4.0-1059.65
5.4.0-1059.65
ubuntu/linux-gcp<5.4.0-1101.110
5.4.0-1101.110
ubuntu/linux-gcp-5.15<5.15.0-1030.37~20.04.1
5.15.0-1030.37~20.04.1
ubuntu/linux-gke<5.4.0-1095.102
5.4.0-1095.102
ubuntu/linux-gke-5.15<5.15.0-1028.33~20.04.1
5.15.0-1028.33~20.04.1
ubuntu/linux-gkeop<5.4.0-1065.69
5.4.0-1065.69
ubuntu/linux-gkeop-5.15<5.15.0-1016.21~20.04.1
5.15.0-1016.21~20.04.1
ubuntu/linux-hwe-5.15<5.15.0-67.74~20.04.1
5.15.0-67.74~20.04.1
ubuntu/linux-ibm<5.4.0-1045.50
5.4.0-1045.50
ubuntu/linux-intel-iotg-5.15<5.15.0-1026.31~20.04.1
5.15.0-1026.31~20.04.1
ubuntu/linux-iot<5.4.0-1013.15
5.4.0-1013.15
ubuntu/linux-kvm<5.4.0-1087.93
5.4.0-1087.93
ubuntu/linux-lowlatency-hwe-5.15<5.15.0-67.74~20.04.1
5.15.0-67.74~20.04.1
ubuntu/linux-nvidia-tegra-5.15<5.15.0-1014.14~20.04.1
5.15.0-1014.14~20.04.1
ubuntu/linux-oracle<5.4.0-1094.103
5.4.0-1094.103
ubuntu/linux-oracle-5.15<5.15.0-1030.36~20.04.1
5.15.0-1030.36~20.04.1
ubuntu/linux-raspi<5.4.0-1081.92
5.4.0-1081.92
ubuntu/linux-riscv-5.15<5.15.0-1030.34~20.04.1
5.15.0-1030.34~20.04.1
ubuntu/linux-xilinx-zynqmp<5.4.0-1022.26
5.4.0-1022.26
ubuntu/linux-aws-5.11*
ubuntu/linux-aws-5.13*
ubuntu/linux-aws-5.8*
ubuntu/linux-azure-5.11*
ubuntu/linux-azure-5.13*
ubuntu/linux-azure-5.8*
ubuntu/linux-azure-fde-5.15<5.15.0-1114.123~20.04.1
5.15.0-1114.123~20.04.1
ubuntu/linux-gcp-5.11*
ubuntu/linux-gcp-5.13*
ubuntu/linux-gcp-5.8*
ubuntu/linux-hwe-5.11*
ubuntu/linux-hwe-5.13*
ubuntu/linux-hwe-5.8*
ubuntu/linux-intel-5.13*
ubuntu/linux-oem-5.10*
ubuntu/linux-oem-5.13*
ubuntu/linux-oem-5.6*
ubuntu/linux-oracle-5.11*
ubuntu/linux-oracle-5.13*
ubuntu/linux-oracle-5.8*
ubuntu/linux-raspi2*
ubuntu/linux-riscv*
ubuntu/linux-riscv-5.11*
ubuntu/linux-riscv-5.8*
ubuntu/linux-aws-fips<5.4.0-1099.107+fips1
5.4.0-1099.107+fips1
ubuntu/linux-azure-fips<5.4.0-1104.110+fips1
5.4.0-1104.110+fips1
ubuntu/linux-fips<5.4.0-1073.82
5.4.0-1073.82
ubuntu/linux-gcp-fips<5.4.0-1101.110+fips1
5.4.0-1101.110+fips1
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/linux<5.15.0-67.74
5.15.0-67.74
ubuntu/linux-allwinner-5.19*
ubuntu/linux-aws<5.15.0-1031.35
5.15.0-1031.35
ubuntu/linux-azure<5.15.0-1034.41
5.15.0-1034.41
ubuntu/linux-azure-5.19<5.19.0-1021.22~22.04.1
5.19.0-1021.22~22.04.1
ubuntu/linux-azure-fde<5.15.0-1034.41.1
5.15.0-1034.41.1
ubuntu/linux-gcp<5.15.0-1030.37
5.15.0-1030.37
ubuntu/linux-gke<5.15.0-1028.33
5.15.0-1028.33
ubuntu/linux-gkeop<5.15.0-1016.21
5.15.0-1016.21
ubuntu/linux-hwe-5.19<5.19.0-35.36~22.04.1
5.19.0-35.36~22.04.1
ubuntu/linux-ibm<5.15.0-1026.29
5.15.0-1026.29
ubuntu/linux-intel-iotg<5.15.0-1026.31
5.15.0-1026.31
ubuntu/linux-kvm<5.15.0-1029.34
5.15.0-1029.34
ubuntu/linux-lowlatency<5.15.0-67.74
5.15.0-67.74
ubuntu/linux-lowlatency-hwe-5.19<5.19.0-1018.19~22.04.1
5.19.0-1018.19~22.04.1
ubuntu/linux-nvidia<5.15.0-1023.23
5.15.0-1023.23
ubuntu/linux-oem-5.17*
ubuntu/linux-oem-6.0*
ubuntu/linux-oracle<5.15.0-1030.36
5.15.0-1030.36
ubuntu/linux-raspi<5.15.0-1025.27
5.15.0-1025.27
ubuntu/linux-realtime*
ubuntu/linux-riscv*
ubuntu/linux-bluefield<5.15.0-1014.16
5.15.0-1014.16
ubuntu/linux-intel-iot-realtime<5.15.0-1022.27
5.15.0-1022.27
ubuntu/linux-realtime<5.15.0-1033.36
5.15.0-1033.36
ubuntu/linux-raspi-realtime*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 0:5.14.0-284.11.1.el9_2
  2. Upgrade

    Upgrade redhat/kernel-rt to a version that resolves this vulnerability.

    Fixed in 0:5.14.0-284.11.1.rt14.296.el9_2
  3. Upgrade

    Upgrade debian/linux to a version that resolves this vulnerability.

    Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
  4. Upgrade

    Upgrade redhat/Kernel to a version that resolves this vulnerability.

    Fixed in 6.1
  5. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.4.0-1130.136
  6. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 4.15.0-1176.191~14.04.1
  7. Upgrade

    Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.

    Fixed in 4.4.0-253.287~14.04.1
  8. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 4.4.0-253.287
  9. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.4.0-1168.183
  10. Upgrade

    Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.

    Fixed in 4.15.0-1167.180~16.04.1
  11. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 4.15.0-1176.191~16.04.1
  12. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 4.15.0-1161.178~16.04.1
  13. Upgrade

    Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.

    Fixed in 4.15.0-224.236~16.04.1
  14. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 4.4.0-1131.141
  15. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 4.15.0-1130.141~16.04.1
  16. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 4.4.0-1100.107
  17. Upgrade

    Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1097.105~18.04.1
  18. Upgrade

    Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1104.110~18.04.1
  19. Upgrade

    Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1101.110~18.04.1
  20. Upgrade

    Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-144.161~18.04.1
  21. Upgrade

    Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1045.50~18.04.1
  22. Upgrade

    Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1094.103~18.04.1
  23. Upgrade

    Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1081.92~18.04.1
  24. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 4.15.0-224.236
  25. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.15.0-1167.180
  26. Upgrade

    Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.

    Fixed in 4.15.0-1176.191
  27. Upgrade

    Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.

    Fixed in 4.15.0-1161.178
  28. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 4.15.0-1151.156
  29. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 4.15.0-1130.141
  30. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2106.112
  31. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2085.91
  32. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-1122.133
  33. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2069.74
  34. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 5.4.0-144.161
  35. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 5.4.0-1097.105
  36. Upgrade

    Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1031.35~20.04.1
  37. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 5.4.0-1104.110
  38. Upgrade

    Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1034.41~20.04.1
  39. Upgrade

    Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.

    Fixed in 5.4.0-1059.65
  40. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 5.4.0-1101.110
  41. Upgrade

    Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1030.37~20.04.1
  42. Upgrade

    Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.

    Fixed in 5.4.0-1095.102
  43. Upgrade

    Upgrade ubuntu/linux-gke-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1028.33~20.04.1
  44. Upgrade

    Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.

    Fixed in 5.4.0-1065.69
  45. Upgrade

    Upgrade ubuntu/linux-gkeop-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1016.21~20.04.1
  46. Upgrade

    Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-67.74~20.04.1
  47. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 5.4.0-1045.50
  48. Upgrade

    Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1026.31~20.04.1
  49. Upgrade

    Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.

    Fixed in 5.4.0-1013.15
  50. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 5.4.0-1087.93
  51. Upgrade

    Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-67.74~20.04.1
  52. Upgrade

    Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1014.14~20.04.1
  53. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 5.4.0-1094.103
  54. Upgrade

    Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1030.36~20.04.1
  55. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 5.4.0-1081.92
  56. Upgrade

    Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1030.34~20.04.1
  57. Upgrade

    Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.

    Fixed in 5.4.0-1022.26
  58. Upgrade

    Upgrade ubuntu/linux-azure-fde-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1114.123~20.04.1
  59. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1099.107+fips1
  60. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1104.110+fips1
  61. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1073.82
  62. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1101.110+fips1
  63. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 5.15.0-67.74
  64. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 5.15.0-1031.35
  65. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 5.15.0-1034.41
  66. Upgrade

    Upgrade ubuntu/linux-azure-5.19 to a version that resolves this vulnerability.

    Fixed in 5.19.0-1021.22~22.04.1
  67. Upgrade

    Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.

    Fixed in 5.15.0-1034.41.1
  68. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 5.15.0-1030.37
  69. Upgrade

    Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.

    Fixed in 5.15.0-1028.33
  70. Upgrade

    Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.

    Fixed in 5.15.0-1016.21
  71. Upgrade

    Upgrade ubuntu/linux-hwe-5.19 to a version that resolves this vulnerability.

    Fixed in 5.19.0-35.36~22.04.1
  72. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 5.15.0-1026.29
  73. Upgrade

    Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.

    Fixed in 5.15.0-1026.31
  74. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 5.15.0-1029.34
  75. Upgrade

    Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.

    Fixed in 5.15.0-67.74
  76. Upgrade

    Upgrade ubuntu/linux-lowlatency-hwe-5.19 to a version that resolves this vulnerability.

    Fixed in 5.19.0-1018.19~22.04.1
  77. Upgrade

    Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.

    Fixed in 5.15.0-1023.23
  78. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 5.15.0-1030.36
  79. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 5.15.0-1025.27
  80. Upgrade

    Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.

    Fixed in 5.15.0-1014.16
  81. Upgrade

    Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.

    Fixed in 5.15.0-1022.27
  82. Upgrade

    Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.

    Fixed in 5.15.0-1033.36
  83. Configuration

    Add the TIPC kernel module (tipc) to the kernel module blacklist file to prevent it from loading automatically during boot.

    Linux kernel TIPC protocol module module blacklist = tipc

Event History

Nov 18, 2022
CVE Published
06:30 AM
Mar 11, 2023
Data Sourced
via Red Hat·09:05 AM
DescriptionSeverityAffected Software
Mar 15, 2023
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Apr 19, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

1

What is the severity of CVE-2023-1382?

CVE-2023-1382 has been classified as a medium severity vulnerability.

2

How do I fix CVE-2023-1382?

To mitigate CVE-2023-1382, upgrade to kernel version 0:5.14.0-284.11.1.el9_2 or apply other specified patches.

3

Which systems are affected by CVE-2023-1382?

CVE-2023-1382 affects various Linux kernel versions including 5.14 and 6.1, as well as specific IBM Security products.

4

What type of vulnerability is CVE-2023-1382?

CVE-2023-1382 is a data race flaw in the Linux kernel affecting the tipc protocol.

5

What is the impact of CVE-2023-1382?

The impact of CVE-2023-1382 is a potential NULL pointer dereference that could lead to system instability.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203