CVE-2023-3022
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
A flaw was found in the IPv6 module of the Linux kernel, involving inconsistent use of arg.result in fib6_rule_lookup. This may lead to a kernel panic in fib6_rule_suppress.
Risk Assessment
This flaw could result in serious stability issues for the system, including kernel crashes, which may affect service availability.
Recommendation
It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability and minimize the risk of kernel panic.
Original NVD description (English source)
A flaw was found in the IPv6 module of the Linux kernel. The arg.result was not used consistently in fib6_rule_lookup, sometimes holding rt6_info and other times fib6_info. This was not accounted for in other parts of the code where rt6_info was expected unconditionally, potentially leading to a kernel panic in fib6_rule_suppress.