CVE-2023-6679 | BDVDB-2026-218922 Detail
Red HatRed Hat Enterprise Linux 9
Description#
A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c in the Digital Phase Locked Loop (DPLL) subsystem in the Linux kernel. This issue could be exploited to trigger a denial of service.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact high. Attack vector: local.
Weaknesses#
- CWE-476 NULL Pointer Dereference
References#
- https://access.redhat.com/errata/RHSA-2024:0439
- https://access.redhat.com/errata/RHSA-2024:0448
- https://access.redhat.com/errata/RHSA-2024:0461
- https://access.redhat.com/security/cve/CVE-2023-6679
- https://bugzilla.redhat.com/show_bug.cgi?id=2253986
- https://lore.kernel.org/netdev/20231211083758.1082853-1-jiri@resnulli.us/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7LSPIOMIJYTLZB6QKPQVVAYSUETUWKPF/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LBVHM4LGMFIHBN4UBESYRFMYX3WUICV5/
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.