CVE-2023-3773Medium· 5.5▾ SunlitA flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to cause a 4 byte out-of-bounds read of XFRMA_MTIMER_THRESH when parsing n…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to cause a 4 byte out-of-bounds read of XFRMA_MTIMER_THRESH when parsing netlink attributes, leading to potential leakage of sensitive heap data to userspace.
enterprise_linux = 8.0enterprise_linux = 9.0fedoralinux_kerneldebian_linux = 10.0debian_linux = 12.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2023-3772Medium· 5.5A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem)
CVE-2023-1380High· 7.1A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel
CVE-2023-6121Medium· 4.3An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel
CVE-2023-42755Medium· 6.5A flaw was found in the IPv4 Resource Reservation Protocol (RSVP) classifier in the Linux kernel
CVE-2023-3268High· 7.1An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs
CVE-2026-71222Medium· 5.3A heap out-of-bounds read vulnerability was found in gfs2-utils