CVE-2023-2593
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk48th percentile - higher than 48% of all known CVEs
Summary
A flaw in the Linux kernel's handling of new TCP connections causes memory not to be released after its effective lifetime. This vulnerability allows an unauthenticated attacker to create a denial of service condition on the system.
Risk Assessment
An attacker can remotely exhaust system memory, leading to service disruption. The risk is especially high in production environments with high TCP connection volumes.
Recommendation
Immediately update the Linux kernel to a patched version addressing CVE-2023-2593. As a temporary mitigation, apply firewall rules to limit the rate of new TCP connections.
Original NVD description (English source)
A flaw exists within the Linux kernel's handling of new TCP connections. The issue results from the lack of memory release after its effective lifetime. This vulnerability allows an unauthenticated attacker to create a denial of service condition on the system.