CVE-2023-46838: Linux: netback processing of zero-length transmit fragment
Last updated 25 April 2025
Other sources
Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for the initial part any of them may be of zero length, i.e. carry no data at all. Besides a certain initial portion of the to be transferred data, these parts are directly translated into what Linux calls SKB fragments. Such converted request parts can, when for a particular SKB they are all of length zero, lead to a de-reference of NULL in core networking code.
— NVD
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-46838?
CVE-2023-46838 has been classified with a critical severity level due to potential exploitation in virtual network protocols.
How do I fix CVE-2023-46838?
To fix CVE-2023-46838, upgrade the Linux kernel to a patched version such as 5.10.223-1 or later.
Which software is affected by CVE-2023-46838?
CVE-2023-46838 affects various versions of the Linux kernel, including 4.14 through 6.7.
Is there a workaround for CVE-2023-46838?
Currently, there are no documented workarounds for CVE-2023-46838 other than upgrading to a fixed version of the kernel.
What are the potential impacts of exploiting CVE-2023-46838?
Exploiting CVE-2023-46838 could lead to remote code execution or denial of service within the virtual network.