A flaw was found in the IPv4 Resource Reservation Protocol (RSVP) classifier in the Linux kernel. The xprt pointer may go beyond the linear part of the skb, leading to an out-of-bounds read in the `rsvp_classify` function. This issue may allow a local user to crash the system and cause a denial of service.
Fix
Patch, vendor advisory and mitigation references on NVD 4
- https://bugzilla.redhat.com/show_bug.cgi?id=2239847 Issue Tracking, Patch, Third Party Advisory
- https://seclists.org/oss-sec/2023/q3/229 Exploit, Mailing List, Patch, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2239847 Issue Tracking, Patch, Third Party Advisory
- https://seclists.org/oss-sec/2023/q3/229 Exploit, Mailing List, Patch, Third Party Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.5 · linux, redhat, debianNVD modified 2026-10-15 00:16
Affected (CPE criteria) 3
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
References 14
- https://access.redhat.com/errata/RHSA-2024:2950
- https://access.redhat.com/errata/RHSA-2024:3138
- https://access.redhat.com/security/cve/CVE-2023-42755 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2239847 Issue Tracking, Patch, Third Party Advisory
- https://seclists.org/oss-sec/2023/q3/229 Exploit, Mailing List, Patch, Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:2950
- https://access.redhat.com/errata/RHSA-2024:3138
- https://access.redhat.com/security/cve/CVE-2023-42755 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2239847 Issue Tracking, Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html
- https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
- https://seclists.org/oss-sec/2023/q3/229 Exploit, Mailing List, Patch, Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html