Medium
5.5
Kernel: refcount leak in ctnetlink_create_conntrack()
CVE-2023-7192
First seen on SecPulse
Summary
A memory leak problem was found in ctnetlink_create_conntrack in net/netfilter/nf_conntrack_netlink.c in the Linux Kernel. This issue may allow a local attacker with CAP_NET_ADMIN privileges to cause a denial of service (DoS) attack due to a refcount overflow.
Fix status by distribution
Records published by each distribution for this CVE. Fixed versions differ by release; check each link.
- Debian DEBIAN-CVE-2023-7192 linux Fix available
- Ubuntu UBUNTU-CVE-2023-7192 linux-xilinx-zynqmp, linux-riscv-5.15, linux-realtime +46 more Fix available
References
- advisory access.redhat.com
- patch bugzilla.redhat.com
- patch git.kernel.org
- web access.redhat.com
- web access.redhat.com
- web access.redhat.com
- web access.redhat.com
- web access.redhat.com
- web access.redhat.com
- web access.redhat.com
- web access.redhat.com
- web access.redhat.com
- web access.redhat.com