CVE-2023-28466: Null Pointer Dereference
dotlsgetsockopt in net/tls/tlsmain.c in the Linux kernel through 6.2.6 lacks a locksock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference).
Other sources
Linux Kernel is vulnerable to a denial of service, caused by the lack of a locksock call in dotlsgetsockopt in net/tls/tlsmain.c. By sending a specially crafted request, a local attacker could exploit this vulnerability to cause a race condition, and results in a denial of service condition.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-28466?
CVE-2023-28466 is classified as a high severity vulnerability due to the risk of race conditions that can lead to use-after-free or NULL pointer dereference issues.
How do I fix CVE-2023-28466?
To mitigate CVE-2023-28466, upgrade to Linux kernel version 6.3 or higher.
Which software versions are affected by CVE-2023-28466?
CVE-2023-28466 affects various versions of the Linux kernel up to 6.2.6 and specific versions of IBM Security Verify Governance components.
Is CVE-2023-28466 present in Debian Linux?
Yes, Debian Linux versions that are part of the vulnerability scope may be affected by CVE-2023-28466.
What type of vulnerability is CVE-2023-28466?
CVE-2023-28466 is a race condition vulnerability that occurs in the do_tls_getsockopt function of the Linux kernel.