CVE-2023-6176 Kernel: local dos vulnerability in scatterwalk_copychunks

2023-11-1617:15:44

redhat

raw.githubusercontent.com

cve-2023-6176

kernel

null pointer dereference

cryptographic algorithm

malicious packet

socket configuration

local user

system crash

privilege escalation

6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.2%

JSON

A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality. This issue occurs when a user constructs a malicious packet with specific socket configuration, which could allow a local user to crash the system or escalate their privileges on the system.