CVE-2023-42755: Kernel: rsvp: out-of-bounds read in rsvp_classify()
A flaw was found in rsvpchange(). The root cause is an slab-out-of-bound access, but since the offset to the original pointer is an unsign int fully controlled by users, the behavior is usually a wild pointer access.
Other sources
A flaw was found in the IPv4 Resource Reservation Protocol (RSVP) classifier in the Linux kernel. The xprt pointer may go beyond the linear part of the skb, leading to an out-of-bounds read in the rsvpclassify function. This issue may allow a local user to crash the system and cause a denial of service.
— Launchpad
Linux Kernel is vulnerable to a denial of service, caused by an out-of-bounds read in the rsvp traffic classifier. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause the kernel to crash.
— IBM
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-42755?
CVE-2023-42755 is classified as a high severity vulnerability due to its potential for wild pointer access.
How do I fix CVE-2023-42755?
To mitigate CVE-2023-42755, update your kernel to version 6.3 or later if you are using Red Hat, or apply the recommended patches for affected Debian versions.
Which systems are affected by CVE-2023-42755?
CVE-2023-42755 affects the Linux kernel versions up to 6.3 and specific versions of Red Hat Enterprise Linux and Debian.
What type of vulnerability is CVE-2023-42755?
CVE-2023-42755 is a slab-out-of-bounds access vulnerability found in the rsvp_change() function.
Is CVE-2023-42755 being actively exploited?
As of now, there is no public information indicating that CVE-2023-42755 is being actively exploited in the wild.