CVE-2023-6176: Kernel: local dos vulnerability in scatterwalk_copychunks
A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality. This issue occurs when a user constructs a malicious packet with specific socket configuration, which could allow a local user to crash the system or escalate their privileges on the system.
Other sources
Linux Kernel is vulnerable to a denial of service, caused by a NULL pointer dereference flaw in the API for the cryptographic algorithm scatterwalk function. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause the system to crash or gain elevated privileges.
— IBM
When the attacker carefully constructs the network packet to reach the above path, it will execute scatterwalkcopychunks(walk->src.virt.addr, &walk->in, bsize, 0); At this time, the calculated address is 0xdffffc0000000001, which is an invalid kernel address. Accessing this address will panic the kernel, bringing the system crash.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-6176?
CVE-2023-6176 has a severity rating that suggests it could lead to local system crashes or potential escalation of privileges.
How do I fix CVE-2023-6176?
To fix CVE-2023-6176, upgrade to the patched versions of the Linux kernel, specifically 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.10-1, or 6.12.11-1.
Which systems are affected by CVE-2023-6176?
CVE-2023-6176 affects various versions of the Linux kernel, including those used in Debian and Red Hat Enterprise Linux 8.0 and 9.0.
Who can exploit CVE-2023-6176?
CVE-2023-6176 can be exploited by local users who can send specially crafted packets to the system.
What impact does CVE-2023-6176 have on system security?
CVE-2023-6176 may allow local users to crash the operating system or escalate privileges, posing a significant security risk.