CVE-2023-2019

low-risk

Published 2023-04-24

A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This issue results from the improper management of a reference count. This may allow an attacker to create a denial of service condition on the system.

Do I need to act?

0.02% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 4.4/10 Medium

LOCAL / LOW complexity

Affected Products (2)

Linux Kernel

Enterprise Linux

Affected Vendors

Redhat Linux

References (6)

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=2189137

Patch https://github.com/torvalds/linux/commit/180a6a3ee60a

Third Party Advisory https://www.zerodayinitiative.com/advisories/ZDI-CAN-17811/

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=2189137

Patch https://github.com/torvalds/linux/commit/180a6a3ee60a

Third Party Advisory https://www.zerodayinitiative.com/advisories/ZDI-CAN-17811/

/ 100

low-risk

Severity 15/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 7/34 · Low