CVE-2023-2166

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in the receive path of CAN frames. A local user could use this flaw to crash the system or potentially cause a denial of service.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

No affected versions have been published.

Timeline

Published: Apr 19, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-216607.5Transient DOS in WLAN Firmware while parsing FT Information Elements.CVE-2023-216617.5Transient DOS while parsing WLAN beacon or probe-response frame.CVE-2023-216627.8Memory corruption in Core Platform while printing the response buffer in log.CVE-2023-216637.8Memory Corruption while accessing metadata in Display.CVE-2023-216647.8Memory Corruption in Core Platform while printing the response buffer in log.CVE-2023-216657.8Memory corruption in Graphics while importing a file.CVE-2023-216667.8Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool.CVE-2023-216676.5Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard.CVE-2023-216697.5Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.CVE-2023-216707.8Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode.CVE-2023-216717.8Memory Corruption in Core during syscall for Sectools Fuse comparison feature.CVE-2023-216727.8Memory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions.