cve 2023 3772

About this tag
CVE-2023-3772 is a Linux kernel vulnerability in the XFRM (IP transformation) subsystem, specifically in the xfrm_update_ae_params() function. A local attacker with network administration privileges (CAP_NET_ADMIN) can trigger a null-pointer dereference, causing a kernel crash and denial of service. The flaw has been patched upstream and in downstream distribution kernels. Administrators should apply updates promptly, especially in environments running untrusted workloads in network namespaces or granting CAP_NET_ADMIN. This tag covers discussion of the vulnerability, its impact, and mitigation steps for affected Linux systems.

  1. CVE-2023-3772: Linux XFRM NULL Pointer Crash Patch and Mitigation

    A null-pointer bug tucked inside the Linux kernel’s XFRM (IP transformation) code — specifically in xfrm_update_ae_params() — can be triggered by a local actor with network administration privileges to cause a complete kernel crash and a hard denial-of-service on affected systems; the defect was...