CVE-2023-3022

A flaw was found in the IPv6 module of the Linux kernel. The arg.result was not used consistently in fib6rulelookup, sometimes holding rt6info and other times fib6info. This was not accounted for in other parts of the code where rt6info was expected unconditionally, potentially leading to a kernel panic in fib6rule_suppress.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/3xxx/CVE-2023-3022.json",
    "cna_assigner": "redhat",
    "cwe_ids": [
        "CWE-843"
    ]
}

References

Affected packages

Git / github.com/torvalds/linux

Affected ranges

Type

GIT

Repo

https://github.com/torvalds/linux

Events

Introduced

a188339ca5a396acc588e5851ed7e19f66b0ebd9

Last affected

a188339ca5a396acc588e5851ed7e19f66b0ebd9

Database specific

{
    "extracted_events": [
        {
            "introduced": "Fixed in kernel 5.2-rc1"
        },
        {
            "last_affected": "Fixed in kernel 5.2-rc1"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

Fixed in kernel 5.*

Fixed in kernel 5.2-rc1

v5.*

v5.2-rc1

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-3022.json"