• CVE-2023-3022

发布时间: 2023年6月13日

修改时间: 2024年11月30日

概要

A flaw in the Linux Kernel found. If IPV6 being used in the way that some specific networking local rule enabled and both IPV6 being used, then it can lead to Kernel crash with the message fib6_rule_suppress+0x22 . It happens when receiving some networking packet to the local IPV6 address that matches this specific rule.References:https://github.com/torvalds/linux/commit/a65120bae4b7https://bugzilla.redhat.com/show_bug.cgi?id=2175952https://bugzilla.redhat.com/show_bug.cgi?id=2167604https://bugzilla.redhat.com/show_bug.cgi?id=2140599#c13

CVSS v3 指标

NVD openEuler
Confidentiality None High
Attack Vector Local Local
CVSS评分 5.5 6.7
Attack Complexity Low Low
Privileges Required Low High
Scope Unchanged Unchanged
Integrity None High
User Interaction None None
Availability High High

安全公告

公告名 概要 发布时间
KylinSec-SA-2023-1411 A flaw in the Linux Kernel found. If IPV6 being used in the way that some specific networking local rule enabled and both IPV6 being used, then it can lead to Kernel crash with the message fib6_rule_suppress+0x22 . It happens when receiving some networking packet to the local IPV6 address that matches this specific rule.References:https://github.com/torvalds/linux/commit/a65120bae4b7https://bugzilla.redhat.com/show_bug.cgi?id=2175952https://bugzilla.redhat.com/show_bug.cgi?id=2167604https://bugzilla.redhat.com/show_bug.cgi?id=2140599#c13 2023年6月13日

影响产品

产品 状态
KY3.4-4A kernel Unaffected
KY3.4-5A kernel Unaffected
KY3.5.1 kernel Unaffected
KY3.5.2 kernel Unaffected