CVE-2023-28327

n/a / Linux PUBLISHED

Description (CNA)

A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unix_diag_get_exact in the Linux Kernel. The newly allocated skb does not have sk, leading to a NULL pointer. This flaw allows a local user to crash or potentially cause a denial of service.

Affected (CNA)

Vendor / product	Versions
n/a / Linux	affected Linux

CWE

CWE-476

References

https://bugzilla.redhat.com/show_bug.cgi?id=2177382

ADP enrichment

CVE

No English description supplied.

https://bugzilla.redhat.com/show_bug.cgi?id=2177382

CISA-ADP

No English description supplied.

No references supplied.