What is CVE-2023-22024?

CVE-2023-22024 is a vulnerability in the Unbreakable Enterprise Kernel (UEK) that allows a malicious local user to crash the kernel.

How does CVE-2023-22024 impact Oracle VM Server?

CVE-2023-22024 affects Oracle VM Server version 3.0, allowing a malicious local user to crash the kernel.

Which versions of Oracle Linux are affected by CVE-2023-22024?

CVE-2023-22024 affects Oracle Linux versions 6, 7, 8, and 9.

What is the severity of CVE-2023-22024?

The severity of CVE-2023-22024 is medium with a CVSS 3.1 Base Score of 5.5 (Availability impacts).

Is there a fix available for CVE-2023-22024?

Currently, no fix is available for CVE-2023-22024. It is recommended to stay updated with the latest patches and security advisories from Oracle.

Vulnerability/
CVE-2023-22024

medium

5.5

20/9/2023

13/9/2024

CVE-2023-22024

First published: Wed Sep 20 2023(Updated: )

In the Unbreakable Enterprise Kernel (UEK), the RDS module in UEK has two setsockopt(2) options, RDS_CONN_RESET and RDS6_CONN_RESET, that are not re-entrant. A malicious local user with CAP_NET_ADMIN can use this to crash the kernel. CVSS 3.1 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Credit: secalert_us@oracle.com secalert_us@oracle.com

Affected Software	Affected Version	How to fix
Oracle VM Server	=3.0
Oracle Linux	=6
Oracle Linux	=7
Oracle Linux	=8
Oracle Linux	=9

Never miss a vulnerability like this again

Reference Links

https://linux.oracle.com/cve/CVE-2023-22024.html

Frequently Asked Questions

What is CVE-2023-22024?
CVE-2023-22024 is a vulnerability in the Unbreakable Enterprise Kernel (UEK) that allows a malicious local user to crash the kernel.
How does CVE-2023-22024 impact Oracle VM Server?
CVE-2023-22024 affects Oracle VM Server version 3.0, allowing a malicious local user to crash the kernel.
Which versions of Oracle Linux are affected by CVE-2023-22024?
CVE-2023-22024 affects Oracle Linux versions 6, 7, 8, and 9.
What is the severity of CVE-2023-22024?
The severity of CVE-2023-22024 is medium with a CVSS 3.1 Base Score of 5.5 (Availability impacts).
Is there a fix available for CVE-2023-22024?
Currently, no fix is available for CVE-2023-22024. It is recommended to stay updated with the latest patches and security advisories from Oracle.

collector/nvd-api
collector/nvd-index
agent/references
agent/severity
agent/author
agent/type
agent/event
agent/description
agent/softwarecombine
agent/first-publish-date
agent/last-modified-date
agent/tags
collector/mitre-cve
source/MITRE
vendor/oracle
canonical/oracle vm server
version/oracle vm server/3.0
canonical/oracle linux
version/oracle linux/6
version/oracle linux/7
version/oracle linux/8
version/oracle linux/9

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.