CVE-2023-0394

Updated: 2025-08-20 02:47:06.889867

Description:

A NULL pointer dereference flaw was found in rawv6_push_pending_frames in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw causes the system to crash.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x MEDIUM 5.5

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 5.5 MEDIUM Ignored 2023-11-21 04:11:59 This bug is a NULL-pointer dereference in the IPv6 raw-socket transmit path that only causes a local...
CentOS 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2023-02-02 07:39:29 Ignored due to low severity
CentOS 7 ELS kernel 3.10.0 5.5 MEDIUM Ignored 2023-09-19 05:07:29 Ignored due to low severity
CentOS 8.4 ELS kernel 4.18.0 5.5 MEDIUM Released CLSA-2023:1690287378 2023-07-25 09:13:39
CentOS 8.5 ELS kernel 4.18.0 5.5 MEDIUM Released CLSA-2023:1690294029 2023-07-25 11:09:24
CentOS Stream 8 ELS kernel 4.18.0 5.5 MEDIUM Ignored 2024-10-08 06:17:31 Ignored due to low severity
CloudLinux 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2023-02-02 07:39:30 Ignored due to low severity
CloudLinux 7 ELS kernel 3.10.0 5.5 MEDIUM Ignored 2024-10-08 06:17:31 Ignored due to low severity
Oracle Linux 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2023-02-02 07:39:29 Ignored due to low severity
Ubuntu 16.04 ELS linux-hwe 4.15.0 5.5 MEDIUM Ignored 2025-10-24 06:33:03 Low impact 5.5
Total: 12