CVE Catalog
CVE-2023-3108
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk0.18%
8th percentile - higher than 8% of all known CVEs
Summary
A flaw was found in the skcipher_recvmsg function in the Linux kernel’s interface for symmetric key cipher algorithms. This flaw allows a local user to crash the system.
Risk Assessment
This vulnerability poses a risk of system crashes, potentially leading to downtime and loss of service availability.
Recommendation
It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability.
Original NVD description (English source)
A flaw was found in the subsequent get_user_pages_fast in the Linux kernel’s interface for symmetric key cipher algorithms in the skcipher_recvmsg of crypto/algif_skcipher.c function. This flaw allows a local user to crash the system.