CVE-2023-2593

MediumCVSS 5.9/10Last modified Nov 7, 2026

Description

A flaw exists within the Linux kernel's handling of new TCP connections. The issue results from the lack of memory release after its effective lifetime. This vulnerability allows an unauthenticated attacker to create a denial of service condition on the system.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-835

Affected software

Vendor	Product	Versions
—	—	< 6.2-rc3
Red Hat	Red Hat Enterprise Linux 10	—
Red Hat	Red Hat Enterprise Linux 6	—
Red Hat	Red Hat Enterprise Linux 7	—
Red Hat	Red Hat Enterprise Linux 7	—
Red Hat	Red Hat Enterprise Linux 8	—
Red Hat	Red Hat Enterprise Linux 8	—
Red Hat	Red Hat Enterprise Linux 9	—
Red Hat	Red Hat Enterprise Linux 9	—

References

Timeline

Published: Jul 30, 2025
Last modified: Nov 7, 2026
NVD status: Deferred

Related CVEs from 2023

CVE-2023-259305.9IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 11.1, and 11.5 is vulnerable to a denial of service. Under rare con CVE-2023-259316.8Medtronic identified that the Pelvic Health clinician apps, which are installed on the Smart Programmer mobile device, have a password vulne CVE-2023-259339.8A type confusion bug in TypedArray prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could have been used by a malicious attacker to CVE-2023-259347.5DELL ECS prior to 3.8.0.2 contains an improper verification of cryptographic signature vulnerability. A network attacker with an ability to CVE-2023-259366.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potent CVE-2023-259376.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potent CVE-2023-259386.7Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potent CVE-2023-25949.8A vulnerability, which was classified as critical, was found in SourceCodester Food Ordering Management System 1.0. Affected is an unknown f CVE-2023-259407.8Dell PowerScale OneFS version 9.5.0.0 contains improper link resolution before file access vulnerability in isi_gather_info. A high privileg CVE-2023-259417.8Dell PowerScale OneFS versions 8.2.x-9.5.0.x contain an elevation of privilege vulnerability. A low-privileged local attacker could potentia CVE-2023-259426.5Dell PowerScale OneFS versions 8.2.x-9.4.x contain an uncontrolled resource consumption vulnerability. A malicious network user with low pri CVE-2023-259447.8Uncontrolled search path element in some Intel(R) VCUST Tool software downloaded before February 3nd 2023 may allow an authenticated user to