CVE-2023-3812: Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags
A flaw in the Linux Kernel found. If napi frags enabled and patch 363a5328f4b0 ("net: tun: fix bugs for oversize packet when napi frags enabled") not applied, then when local user try to send too large IPV6 packet (with big packet length), it can lead to out of bounds memory bug.
Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=363a5328f4b0
Other sources
An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Linux Kernel could allow a local authenticated attacker to gain elevated privileges on the system, caused by an out-of-bounds memory access flaw in the TUN/TAP device driver function when napi frags is enabled. By generating a specially crafted packet, an authenticated attacker could exploit this vulnerability to gain elevated privileges or cause the system to crash.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2023-3812?
CVE-2023-3812 is an out-of-bounds memory access flaw found in the Linux kernel’s TUN/TAP device driver functionality.
How does CVE-2023-3812 impact a system?
CVE-2023-3812 allows a local user to crash or potentially escalate their privileges on the system.
What is the severity of CVE-2023-3812?
CVE-2023-3812 has a severity value of 7, indicating a high severity.
What software versions are affected by CVE-2023-3812?
The Linux kernel versions up to and including 6.1, Linux Kernel versions 6.0.19, Linux Kernel version 6.1-rc1, Linux Kernel version 6.1-rc2, Linux Kernel version 6.1-rc3, Redhat Enterprise Linux version 8.0, and Redhat Enterprise Linux version 9.0 are affected by CVE-2023-3812.
How can CVE-2023-3812 be fixed?
To fix CVE-2023-3812, users should update their Linux kernel to version 6.1 or apply the appropriate patches from the Linux kernel repository.