CVE-2023-4459

Summary

A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with normal user privilege to cause a denial of service due to a missing sanity check during cleanup.

Affected Software

VendorProductVersion RangeStatus
Red HatRed Hat Enterprise Linux 8.2 Advanced Update Support0:4.18.0-193.133.1.el8_2 < *unaffected
Red HatRed Hat Enterprise Linux 8.2 Telecommunications Update Service0:4.18.0-193.133.1.rt13.184.el8_2 < *unaffected
Red HatRed Hat Enterprise Linux 8.2 Telecommunications Update Service0:4.18.0-193.133.1.el8_2 < *unaffected
Red HatRed Hat Enterprise Linux 8.2 Update Services for SAP Solutions0:4.18.0-193.133.1.el8_2 < *unaffected
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support0:4.18.0-305.125.1.el8_4 < *unaffected
Red HatRed Hat Enterprise Linux 8.4 Telecommunications Update Service0:4.18.0-305.125.1.rt7.201.el8_4 < *unaffected
Red HatRed Hat Enterprise Linux 8.4 Telecommunications Update Service0:4.18.0-305.125.1.el8_4 < *unaffected
Red HatRed Hat Enterprise Linux 8.4 Update Services for SAP Solutions0:4.18.0-305.125.1.el8_4 < *unaffected
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support0:4.18.0-372.87.1.el8_6 < *unaffected
Red HatRed Hat Enterprise Linux 9.0 Extended Update Support0:5.14.0-70.93.2.el9_0 < *unaffected
Red HatRed Hat Enterprise Linux 9.0 Extended Update Support0:5.14.0-70.93.1.rt21.165.el9_0 < *unaffected
Red HatRed Hat Virtualization 4 for Red Hat Enterprise Linux 80:4.18.0-372.87.1.el8_6 < *unaffected

Weaknesses

  • CWE-476: NULL Pointer Dereference

Workarounds

In order to mitigate this issue, prevent the affected code from being loaded by blacklisting the kernel module "vmxnet3". For instructions relating to how to blacklist a kernel module refer to: https://access.redhat.com/solutions/41278

Exploiting this flaw will require CAP_NET_ADMIN access privilege in any user or network namespace.

ADP Enrichment

CVE Program Container

Additional References

References