CVE-2023-3772
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel crash and denial of service.
Risk Assessment
This vulnerability poses a risk of system crashes, potentially leading to service downtime. A malicious user with the appropriate privileges could exploit this vulnerability to disrupt system operations.
Recommendation
It is recommended to update the Linux kernel to the latest version that includes fixes for this vulnerability. Access to CAP_NET_ADMIN privileges should also be restricted to trusted users.
Original NVD description (English source)
A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel crash and denial of service.