CVE-2023-4881: Medium severity Linux Linux kernel vulnerability
REJECT CVE-2023-4881 was wrongly assigned to a bug that was deemed to be a non-security issue by the Linux kernel security team.
Other sources
A stack based out-of-bounds write was found in the netfilter subsystem in the Linux kernel. If priv->len is a multiple of 4, then dst[len / 4] can write past the destination array which leads to stack corruption.
Upstream patch: https://lore.kernel.org/all/20230906162525.11079-2-fw@strlen.de/
Rejected reason: CVE-2023-4881 was wrongly assigned to a bug that was deemed to be a non-security issue by the Linux kernel security team.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-4881?
The severity of CVE-2023-4881 is medium.
What software is affected by CVE-2023-4881?
Linux Kernel, Fedora, and Red Hat Enterprise Linux versions 8.0 and 9.0 are affected by CVE-2023-4881.
Is CVE-2023-4881 a security issue?
No, CVE-2023-4881 was wrongly assigned to a bug that was deemed to be a non-security issue by the Linux kernel security team.
Are there any references available for CVE-2023-4881?
Yes, you can find references for CVE-2023-4881 at the following links: [link1](https://lore.kernel.org/all/20230906162525.11079-2-fw@strlen.de/), [link2](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2238313), [link3](https://bugzilla.redhat.com/show_bug.cgi?id=2238312).
What is the Common Weakness Enumeration (CWE) ID for CVE-2023-4881?
The Common Weakness Enumeration (CWE) ID for CVE-2023-4881 is 787.