CVE-2023-54004

CVE-2023-54004 refers to a Linux kernel vulnerability in the UDP/UDPLITE path. The issue is a NULL pointer dereference in __sk_mem_raise_allocated() triggered during handling of UDP sockets using IPPROTO_UDPLITE (0x88), as observed in syzbot reports citing a null-ptr-deref in sk_get_rmem0(). The ...

PT-2025-52961

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained a null pointer dereference issue within the UDPLITE protocol handling, specifically in the sk mem raise allocated function. This issue was identified through...

kernel: Linux kernel UDPLITE: Denial of Service via null pointer dereference

A flaw was found in the Linux kernel's UDPLITE UDP-Lite implementation. A local user can exploit a null pointer dereference in the skmemraiseallocated function by using the IPPROTOUDPLITE protocol. This vulnerability can lead to a system crash, resulting in a denial of service DoS...