Linux Distros Unpatched Vulnerability : CVE-2023-23006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel before 5.15.13, drivers/net/ethernet/mellanox/mlx5/core/steering/drdomain.c misinterprets the mlx5getuarspage return value expects it to be...

BELL-CVE-2023-23006 CVE-2023-23006 does not affect BellSoft software

Bulletin has no description...

SUSE-SU-2023:2141-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2235: A use-after-free vulnerability in the Performance Events system can be exploited to achieve local privilege escalation bsc1210986. -...

CVE-2023-23006 affecting package kernel 5.10.172.1-1

CVE-2023-23006 affecting package kernel 5.10.172.1-1. A patched version of the package is available...

CVE-2023-23006

A NULL pointer dereference flaw was found in the Linux kernel’s Mellanox Technologies software-managed steering driver. This flaw allows a local user to crash the system...

CVE-2023-23006

creationtimestamp| type| source ---|---|--- 2023-03-01 22:33:37+00:00| seen| https://t.me/cibsecurity/59261...

CVE-2023-23006

In the Linux kernel before 5.15.13, drivers/net/ethernet/mellanox/mlx5/core/steering/drdomain.c misinterprets the mlx5getuarspage return value expects it to be NULL in the error case, whereas it is actually an error pointer...

CVE-2023-23006

CVE-2023-23006 affects the Linux kernel prior to 5.15.13. The vulnerability lies in drivers/net/ethernet/mellanox/mlx5/core/steering/dr_domain.c, which misinterprets the return value of mlx5_get_uars_page in error cases (expects NULL but receives an error pointer). This can lead to a faulty NULL-...