Riskcovery

CVE-2023-22024

State
Published
Severity
5.5 Medium
Published
Sep 20, 2023
Updated
Sep 13, 2024
Reserved
Dec 17, 2022

Read the record on cve.org

Description

In the Unbreakable Enterprise Kernel (UEK), the RDS module in UEK has two setsockopt(2) options, RDS_CONN_RESET and RDS6_CONN_RESET, that are not re-entrant. A malicious local user with CAP_NET_ADMIN can use this to crash the kernel. CVSS 3.1 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Horacle

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Oracle LinuxOracle Corporation
  • Oracle Linux: 6Affected
  • Oracle Linux: 7Affected
  • Oracle Linux: 8Affected
  • Oracle Linux: 9Affected
Oracle VMOracle Corporation
  • Oracle VM: 3Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.