Analytical use of cookies
CVE-2023-39194CVSS 3.2Linux
CVE-2023-39194: linux kernel vulnerability
A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past the end of an allocated buffer. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, potentially leading to an information disclosure.
- CVSS
- 3.2 LOW
- EPSS
- 33.55%
- Активно використовується
- немає в KEV
- Продукт
- linux kernel
Що відомо
A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past the end of an allocated buffer. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, potentially leading to an information disclosure.