CVE-2023-46343: Null Pointer Dereference
In the Linux kernel before 6.5.9 there is a NULL pointer dereference in sendacknowledge in net/nfc/nci/spi.c.
Other sources
In the Linux kernel before 6.5.9, there is a NULL pointer dereference in sendacknowledge in net/nfc/nci/spi.c.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.27-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 6.5.9
Event History
Frequently Asked Questions
What is the severity of CVE-2023-46343?
CVE-2023-46343 is classified as a high-severity vulnerability due to the potential for a NULL pointer dereference leading to system instability.
How do I fix CVE-2023-46343?
To fix CVE-2023-46343, update your Linux kernel to version 6.5.9 or later.
Which Linux kernel versions are affected by CVE-2023-46343?
CVE-2023-46343 affects the Linux kernel versions prior to 6.5.9.
What component does CVE-2023-46343 impact?
CVE-2023-46343 impacts the send_acknowledge function in net/nfc/nci/spi.c.
What are the consequences of exploiting CVE-2023-46343?
Exploiting CVE-2023-46343 could lead to a denial of service due to a system crash from NULL pointer dereference.