Description
A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return.
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected products
- Debian / debian_linux10.0 – 10.0
- Linux / Linux kernel6.6.13
- RedHat / codeready_linux_builder9.0 – 9.0
- RedHat / codeready_linux_builder9.0 – 9.0
- RedHat / codeready_linux_builder8.0 – 8.0
- RedHat / codeready_linux_builder_for_arm648.0_aarch64 – 8.0_aarch64
- RedHat / codeready_linux_builder_for_eus9.8 – 9.8
- RedHat / codeready_linux_builder_for_eus9.4 – 9.4
- RedHat / codeready_linux_builder_for_eus9.4 – 9.4
- RedHat / codeready_linux_builder_for_eus9.6 – 9.6
- RedHat / codeready_linux_builder_for_eus9.6 – 9.6
- RedHat / codeready_linux_builder_for_eus9.8 – 9.8
- RedHat / codeready_linux_builder_for_ibm_z_systems9.0_s390x – 9.0_s390x
- RedHat / codeready_linux_builder_for_ibm_z_systems_eus9.8_s390x – 9.8_s390x
- RedHat / codeready_linux_builder_for_ibm_z_systems_eus9.6_s390x – 9.6_s390x
- RedHat / codeready_linux_builder_for_ibm_z_systems_eus9.4_s390x – 9.4_s390x
- RedHat / codeready_linux_builder_for_power_little_endian9.0_ppc64le – 9.0_ppc64le
- RedHat / codeready_linux_builder_for_power_little_endian8.0 – 8.0
- RedHat / codeready_linux_builder_for_power_little_endian_els8.10 – 8.10
- RedHat / codeready_linux_builder_for_power_little_endian_eus9.6_ppc64le – 9.6_ppc64le
- RedHat / codeready_linux_builder_for_power_little_endian_eus9.4_ppc64le – 9.4_ppc64le
- RedHat / codeready_linux_builder_for_power_little_endian_eus9.8_ppc64le – 9.8_ppc64le
- RedHat / enterprise_linux9.0 – 9.0
- RedHat / enterprise_linux8.0 – 8.0
- RedHat / enterprise_linux8.0 – 8.0
- RedHat / enterprise_linux9.0 – 9.0
- RedHat / enterprise_linux8.0 – 8.0
- RedHat / enterprise_linux9.8 – 9.8
- RedHat / enterprise_linux9.6 – 9.6
- RedHat / enterprise_linux9.4 – 9.4
- RedHat / enterprise_linux9.0 – 9.0
- RedHat / enterprise_linux_eus9.6 – 9.6
- RedHat / enterprise_linux_eus9.4 – 9.4
- RedHat / enterprise_linux_eus9.4 – 9.4
- RedHat / enterprise_linux_eus9.6 – 9.6
- RedHat / enterprise_linux_eus9.8 – 9.8
- RedHat / enterprise_linux_eus9.8 – 9.8
- RedHat / enterprise_linux_for_els9.8 – 9.8
- RedHat / enterprise_linux_for_els8.10 – 8.10
- RedHat / enterprise_linux_for_els9.8 – 9.8
- RedHat / enterprise_linux_for_els8.10 – 8.10
- RedHat / enterprise_linux_for_els9.4 – 9.4
- RedHat / enterprise_linux_for_els9.4 – 9.4
- RedHat / enterprise_linux_for_els9.6 – 9.6
- RedHat / enterprise_linux_for_els9.6 – 9.6
- RedHat / enterprise_linux_for_ibm_z_systems8.0 – 8.0
- RedHat / enterprise_linux_for_ibm_z_systems9.0 – 9.0
- RedHat / enterprise_linux_for_ibm_z_systems9.4_s390x – 9.4_s390x
- RedHat / enterprise_linux_for_ibm_z_systems9.6_s390x – 9.6_s390x
- RedHat / enterprise_linux_for_ibm_z_systems9.8_s390x – 9.8_s390x
- RedHat / enterprise_linux_for_ibm_z_systems_els8.10 – 8.10
- RedHat / enterprise_linux_for_ibm_z_systems_els9.8 – 9.8
- RedHat / enterprise_linux_for_ibm_z_systems_els9.4 – 9.4
- RedHat / enterprise_linux_for_ibm_z_systems_els9.6 – 9.6
- RedHat / enterprise_linux_for_ibm_z_systems_eus9.8_s390x – 9.8_s390x
- RedHat / enterprise_linux_for_ibm_z_systems_eus9.4_s390x – 9.4_s390x
- RedHat / enterprise_linux_for_ibm_z_systems_eus9.6_s390x – 9.6_s390x
- RedHat / enterprise_linux_for_power_little_endian9.0 – 9.0
- RedHat / enterprise_linux_for_power_little_endian8.0 – 8.0
- RedHat / enterprise_linux_for_power_little_endian_els9.6 – 9.6
- RedHat / enterprise_linux_for_power_little_endian_els9.8 – 9.8
- RedHat / enterprise_linux_for_power_little_endian_els9.4 – 9.4
- RedHat / enterprise_linux_for_power_little_endian_eus9.4_ppc64le – 9.4_ppc64le
- RedHat / enterprise_linux_for_power_little_endian_eus9.8 – 9.8
- RedHat / enterprise_linux_for_power_little_endian_eus9.6_ppc64le – 9.6_ppc64le
- RedHat / enterprise_linux_for_real_time8.0 – 8.0
- RedHat / enterprise_linux_for_real_time_for_nfv8.0 – 8.0
- RedHat / enterprise_linux_server_aus9.6 – 9.6
- RedHat / enterprise_linux_server_aus9.4 – 9.4
- RedHat / enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions9.4_ppc64le – 9.4_ppc64le
- RedHat / enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions9.6_ppc64le – 9.6_ppc64le
- RedHat / enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions9.8 – 9.8
- RedHat / enterprise_linux_update_services_for_sap_solutions9.4 – 9.4
- RedHat / enterprise_linux_update_services_for_sap_solutions9.6 – 9.6
- RedHat / enterprise_linux_update_services_for_sap_solutions9.8 – 9.8
References
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2024:2394
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2024:2950
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2024:3138
- VENDOR_ADVISORYhttps://access.redhat.com/security/cve/CVE-2023-6915
- MISChttps://bugzilla.redhat.com/show_bug.cgi?id=2254982
- PATCHhttps://github.com/torvalds/linux/commit/af73483f4e8b6f5c68c9aa63257bdd929a9c194a
Updated 15m ago · 8 sources