CVE-2023-2166: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in the receive path of CAN frames. A local user could use this flaw to crash the system or potentially cause a denial of service.

Affected products

• Linux Linux Kernel: before 6.1 (fixed in 6.1); version 6.1 only

Published 2023-04-19. Last modified 2026-06-17.