CVE-2023-39194: Fedoraproject Fedora

Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days.

A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past the end of an allocated buffer. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, potentially leading to an information disclosure.

Affected products

• Fedoraproject Fedora: version 38 only
• Linux Linux Kernel: before 6.5 (fixed in 6.5); version 6.5 only
• Red Hat Enterprise Linux: version 8.0 only; version 9.0 only

Published 2023-10-09. Last modified 2026-06-17.