cve 2023 3338

CVE-2023-3338 is a null-pointer dereference vulnerability in the Linux kernel's DECnet stack, specifically in the dn_nsp_send function. This flaw can be exploited to cause a denial-of-service condition. The vulnerability prompted vendors and distributions to remove the obsolete DECnet implementation entirely rather than applying a simple patch. Discussions on WindowsForum highlight how this issue serves as an example of how long-lived, low-usage subsystems can become security liabilities. The tag covers technical analysis, advisory details, and the broader implications for system stability and security.