CVE-2023-42754
A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack.
Published Oct 5, 2023 · updated Oct 15, 2026 · linux linux kernel
A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before calling __ip_options_compile, which is not always the case if the skb is re-routed by ipvs. This issue may allow a local user with CAP_NET_ADMIN privileges to crash the system.
Timeline
Detection, updates, and resolution for this record.
Oct 5, 2023 · NIST NVD
Detected
A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before calling __ip_options_compile, which is not always the case if the skb is re-routed by ipvs. This issue may allow a local user with CAP_NET_ADMIN privileges to crash the system.
Oct 15, 2026 · NIST NVD
Updated
A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before calling __ip_options_compile, which is not always the case if the skb is re-routed by ipvs. This issue may allow a local user with CAP_NET_ADMIN privileges to crash the system.
Affected
- cpe fedoraproject/fedora37
- cpe fedoraproject/fedora38
- cpe fedoraproject/fedora39
- cpe linux/linux kernelversion unspecified
- cpe linux/linux kernel6.6
- cpe redhat/enterprise linux8.0
- cpe redhat/enterprise linux9.0
Sources
- CVE.orgCVE-2023-42754
Official CVE identifier
cve.org - FIRST EPSSCVE-2023-42754
30-day exploitation probability 0.4%
first.org - NIST NVDCVE-2023-42754
A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before calling __ip_options_compile, which is not always the case if the skb is re-routed by ipvs. This issue may allow a local user with C
nvd.nist.gov