kernel CVE-2023-0394

Moderate

rpkelly published GHSA-5vr8-77vh-f884

Mar 21, 2023

Package

kernel-5.10 (bottlerocket)

Affected versions

< 1.13.0

Patched versions

1.13.0

kernel-5.15 (bottlerocket)

< 1.13.0

1.13.0

Description

A NULL pointer dereference flaw was found in rawv6_push_pending_frames in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw causes the system to crash.