CVE-2023-6679

MediumCVSS 5.5/10Last modified Nov 6, 2026

Description

A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c in the Digital Phase Locked Loop (DPLL) subsystem in the Linux kernel. This issue could be exploited to trigger a denial of service.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
Red Hat	Red Hat Enterprise Linux 9	—
Red Hat	Red Hat Enterprise Linux 9	—
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	—
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	—
Red Hat	Red Hat Enterprise Linux 6	—
Red Hat	Red Hat Enterprise Linux 7	—
Red Hat	Red Hat Enterprise Linux 7	—
Red Hat	Red Hat Enterprise Linux 8	—
Red Hat	Red Hat Enterprise Linux 8	—
Red Hat	Red Hat Enterprise Linux 9	—

References

https://access.redhat.com/errata/RHSA-2024:0439
https://access.redhat.com/errata/RHSA-2024:0448
https://access.redhat.com/errata/RHSA-2024:0461
https://access.redhat.com/security/cve/CVE-2023-6679Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2253986Issue Tracking, Third Party Advisory
https://lore.kernel.org/netdev/20231211083758.1082853-1-jiri@resnulli.us/Mailing List, Patch, Vendor Advisory
https://access.redhat.com/errata/RHSA-2024:0439
https://access.redhat.com/errata/RHSA-2024:0448
https://access.redhat.com/errata/RHSA-2024:0461
https://access.redhat.com/security/cve/CVE-2023-6679Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2253986Issue Tracking, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7LSPIOMIJYTLZB6QKPQVVAYSUETUWKPF/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LBVHM4LGMFIHBN4UBESYRFMYX3WUICV5/
https://lore.kernel.org/netdev/20231211083758.1082853-1-jiri@resnulli.us/Mailing List, Patch, Vendor Advisory

Timeline

Published: Dec 11, 2023
Last modified: Nov 6, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-66808.1An improper certificate validation issue in Smartcard authentication in GitLab EE affecting all versions from 11.6 prior to 16.4.4, 16.5 pri CVE-2023-66815.3A vulnerability was found in JWCrypto. This flaw allows an attacker to cause a denial of service (DoS) attack and possible password brute-fo CVE-2023-66826.5An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.9.7, starting from 16.10 prior to 16.10.5 CVE-2023-66836.5A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. The qemu_clipboard_request() function can be reach CVE-2023-66845.4The Ibtana – WordPress Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ive' shortcode in versions CVE-2023-66876.5An issue was discovered by Elastic whereby Elastic Agent would log a raw event in its own logs at the WARN or ERROR level if ingesting that CVE-2023-66886.5An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.11 prior to 16.11.2. A problem with the processing logi CVE-2023-66898.8A successful CSRF attack could force the user to perform state changing requests on the application. If the victim is an administrative acco CVE-2023-66902.0A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on transferred repositories by making a Graph CVE-2023-66917.8Cambium ePMP Force 300-25 version 4.7.0.1 is vulnerable to a code injection vulnerability that could allow an attacker to perform remote cod CVE-2023-66926.4The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's tab anchor CVE-2023-66935.3A stack based buffer overflow was found in the virtio-net device of QEMU. This issue occurs when flushing TX in the virtio_net_flush_tx func