CVE-2023-3812: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Affected products

• Linux Linux Kernel: from 4.15, before 4.19.265 (fixed in 4.19.265); from 4.20, before 5.4.224 (fixed in 5.4.224); from 5.5, before 5.10.154 (fixed in 5.10.154); from 5.11, before 5.15.78 (fixed in 5.15.78); from 5.16, before 6.0.8 (fixed in 6.0.8)
• Red Hat Enterprise Linux: version 8.0 only; version 9.0 only

Published 2023-07-24. Last modified 2026-06-17.