CVE Catalog
CVE-2023-4459
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.25%
16th percentile - higher than 16% of all known CVEs
Summary
A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in the Linux Kernel, which may lead to a denial of service.
Risk Assessment
A local attacker with normal user privileges may exploit this vulnerability to cause a denial of service, affecting system availability.
Recommendation
It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability.
Original NVD description (English source)
A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with normal user privilege to cause a denial of service due to a missing sanity check during cleanup.