CVE-2023-1382

2023-04-1900:00:00

CWE-476

redhat

www.cve.org

data race

linux kernel

null pointer

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

A data race flaw was found in the Linux kernel, between where con is allocated and con->sock is set. This issue leads to a NULL pointer dereference when accessing con->sock->sk in net/tipc/topsrv.c in the tipc protocol in the Linux kernel.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Kernel",
    "versions": [
      {
        "version": "Linux Kernel prior to Kernel 6.1 RC7",
        "status": "affected"
      }
    ]
  }
]