Back to bug 2187813

Who When What Removed Added
Rohit Keshri 2023-04-18 18:44:58 UTC CC acaringi, allarkin, bhu, chwhite, dbohanno, ddepaula, debarbos, dfreiber, dvlasenk, ezulian, hkrzesin, jarod, jburrell, jdenham, jfaracco, jferlan, jforbes, jlelli, joe.lawrence, jshortt, jstancek, jwyatt, kcarcia, kernel-mgr, ldoskova, lgoncalv, lleshchi, lzampier, nmurray, ptalbert, qzhao, rogbas, rrobaina, rvrbovsk, rysulliv, scweaver, swood, tyberry, vkumar, walters, wcosta, williams, wmealing, ycote
Rohit Keshri 2023-04-18 18:49:29 UTC Alias CVE-2023-2166
Summary Kenrel: NULL pointer dereference in can_rcv_filter CVE-2023-2166 Kenrel: NULL pointer dereference in can_rcv_filter
Rohit Keshri 2023-04-18 18:51:11 UTC Depends On 2187817, 2187818, 2187815, 2187816
Paige Jung 2023-04-18 19:55:05 UTC Summary CVE-2023-2166 Kenrel: NULL pointer dereference in can_rcv_filter CVE-2023-2166 Kernel: NULL pointer dereference in can_rcv_filter
Doc Text A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in the receive path of CAN frames. A local user could use this flaw to crash the system or potentially cause a denial of service. A null pointer dereference issue was found in the can protocol in net/can/af_can.c in the Linux Kernel. ml_priv may not be initialized in the receive path of CAN frames. This issue could allow a local user to crash the system or cause a denial of service.
Steve Grubb 2023-05-10 21:09:56 UTC CC sgrubb
Doc Type --- If docs needed, set a value
RaTasha Tillery-Smith 2023-05-11 11:47:50 UTC Doc Text A null pointer dereference issue was found in the can protocol in net/can/af_can.c in the Linux Kernel. ml_priv may not be initialized in the receive path of CAN frames. This issue could allow a local user to crash the system or cause a denial of service. A NULL pointer dereference issue was found in the can protocol in net/can/af_can.c in the Linux kernel, where ml_priv may not be initialized in the receive path of CAN frames. This flaw allows a local user to crash the system or cause a denial of service.
Red Hat Bugzilla 2023-07-07 08:28:38 UTC Assignee security-response-team nobody

Back to bug 2187813