CVE-2023-28466: Null Pointer Dereference
dotlsgetsockopt in net/tls/tlsmain.c in the Linux kernel through 6.2.6 lacks a locksock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference).
Other sources
Linux Kernel is vulnerable to a denial of service, caused by the lack of a locksock call in dotlsgetsockopt in net/tls/tlsmain.c. By sending a specially crafted request, a local attacker could exploit this vulnerability to cause a race condition, and results in a denial of service condition.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.3 - Upgrade
Upgrade
Linux Kernelto a version that resolves this vulnerability.Patch 49c47cc21b5b7a3d8deb18fc57b0aa2ab1286962
Event History
Frequently Asked Questions
What is the severity of CVE-2023-28466?
CVE-2023-28466 is classified as a high severity vulnerability due to the risk of race conditions that can lead to use-after-free or NULL pointer dereference issues.
How do I fix CVE-2023-28466?
To mitigate CVE-2023-28466, upgrade to Linux kernel version 6.3 or higher.
Which software versions are affected by CVE-2023-28466?
CVE-2023-28466 affects various versions of the Linux kernel up to 6.2.6 and specific versions of IBM Security Verify Governance components.
Is CVE-2023-28466 present in Debian Linux?
Yes, Debian Linux versions that are part of the vulnerability scope may be affected by CVE-2023-28466.
What type of vulnerability is CVE-2023-28466?
CVE-2023-28466 is a race condition vulnerability that occurs in the do_tls_getsockopt function of the Linux kernel.