Red Hat: CVE-2023-23455: Kernel: denial of service in atm_tc_enqueue in net/sched/sch_atm.c due to type confusion (Multiple Advisories)

Red Hat: CVE-2023-23455: Kernel: denial of service in atm_tc_enqueue in net/sched/sch_atm.c due to type confusion (Multiple Advisories)

Severity

5

CVSS

(AV:L/AC:L/Au:S/C:N/I:N/A:C)

Published

01/12/2023

Created

11/16/2023

Added

11/15/2023

Modified

01/28/2025

Description

atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results).

Solution(s)

• redhat-upgrade-kernel
• redhat-upgrade-kernel-rt

References

• CVE-2023-23455
• RHSA-2023:6901
• RHSA-2023:7077
• RHSA-2024:0575
• RHSA-2024:0724