CVE-2023-4459
Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()
- Published
- Updated
- Reserved
- Assigned by
- redhat
Description
A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with normal user privilege to cause a denial of service due to a missing sanity check during cleanup.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| redhatCNA (assigner) | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
| NVDNVD · Modified | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.25% · top 84% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Weakness
Affected products
Red Hat · Red Hat Enterprise Linux 8.2 Advanced Update Support
- unaffected 0:4.18.0-193.133.1.el8_2 – < *
Red Hat · Red Hat Enterprise Linux 8.2 Telecommunications Update Service
- unaffected 0:4.18.0-193.133.1.rt13.184.el8_2 – < *
Red Hat · Red Hat Enterprise Linux 8.2 Telecommunications Update Service
- unaffected 0:4.18.0-193.133.1.el8_2 – < *
Red Hat · Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions
- unaffected 0:4.18.0-193.133.1.el8_2 – < *
Red Hat · Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
- unaffected 0:4.18.0-305.125.1.el8_4 – < *
Red Hat · Red Hat Enterprise Linux 8.4 Telecommunications Update Service
- unaffected 0:4.18.0-305.125.1.rt7.201.el8_4 – < *
Red Hat · Red Hat Enterprise Linux 8.4 Telecommunications Update Service
- unaffected 0:4.18.0-305.125.1.el8_4 – < *
Red Hat · Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
- unaffected 0:4.18.0-305.125.1.el8_4 – < *
Red Hat · Red Hat Enterprise Linux 8.6 Extended Update Support
- unaffected 0:4.18.0-372.87.1.el8_6 – < *
Red Hat · Red Hat Enterprise Linux 9.0 Extended Update Support
- unaffected 0:5.14.0-70.93.2.el9_0 – < *
Red Hat · Red Hat Enterprise Linux 9.0 Extended Update Support
- unaffected 0:5.14.0-70.93.1.rt21.165.el9_0 – < *
Red Hat · Red Hat Virtualization 4 for Red Hat Enterprise Linux 8
- unaffected 0:4.18.0-372.87.1.el8_6 – < *
Red Hat · Red Hat Enterprise Linux 6
All versions: unknown
Red Hat · Red Hat Enterprise Linux 7
All versions: unknown
Red Hat · Red Hat Enterprise Linux 7
All versions: unknown
Red Hat · Red Hat Enterprise Linux 8
All versions: affected
Red Hat · Red Hat Enterprise Linux 8
All versions: affected
Red Hat · Red Hat Enterprise Linux 9
All versions: affected
Red Hat · Red Hat Enterprise Linux 9
All versions: affected
What to do
Workaround: In order to mitigate this issue, prevent the affected code from being loaded by blacklisting the kernel module "vmxnet3". For instructions relating to how to blacklist a kernel module refer to: https://access.redhat.com/solutions/41278 ~~~ Exploiting this flaw will require CAP_NET_ADMIN access privilege in any user or network namespace. ~~~
References (10)
- RHSA-2024:0412 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- RHSA-2024:1250 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- RHSA-2024:1306 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- RHSA-2024:1367 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- RHSA-2024:1382 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- RHSA-2024:2006 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- RHSA-2024:2008 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
- https://access.redhat.com/security/cve/CVE-2023-4459 (opens in a new tab)vdb-entryx_refsource_REDHATx_transferred
- RHBZ#2219268 (opens in a new tab)issue-trackingx_refsource_REDHATx_transferred
- https://github.com/torvalds/linux/commit/edf410cb74dc612fd47ef5be319c5a0bcd6e6ccd (opens in a new tab)x_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-4459)Record last updated .