CVE-2023-3106: Fedoraproject Fedora

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A NULL pointer dereference vulnerability was found in netlink_dump. This issue can occur when the Netlink socket receives the message(sendmsg) for the XFRM_MSG_GETSA, XFRM_MSG_GETPOLICY type message, and the DUMP flag is set and can cause a denial of service or possibly another unspecified impact. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is unlikely.

Affected products

• Fedoraproject Fedora: version 38 only
• Linux Linux Kernel: from 3.15, before 3.16.39 (fixed in 3.16.39); from 3.17, before 4.4.223 (fixed in 4.4.223); from 4.5, before 4.7.10 (fixed in 4.7.10); version 4.8 only

Published 2023-07-12. Last modified 2026-06-17.