CVE-2023-6915

MediumCVSS 5.5/10Last modified Nov 5, 2026

Description

A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
Red Hat	Red Hat Enterprise Linux 8	—
Red Hat	Red Hat Enterprise Linux 8	—
Red Hat	Red Hat Enterprise Linux 9	—
Red Hat	Red Hat Enterprise Linux 9	—
Red Hat	Red Hat Enterprise Linux 6	—
Red Hat	Red Hat Enterprise Linux 7	—
Red Hat	Red Hat Enterprise Linux 7	—
Red Hat	Red Hat Enterprise Linux 9	—

References

https://access.redhat.com/errata/RHSA-2024:2394Vendor Advisory
https://access.redhat.com/errata/RHSA-2024:2950Vendor Advisory
https://access.redhat.com/errata/RHSA-2024:3138Vendor Advisory
https://access.redhat.com/security/cve/CVE-2023-6915Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2254982Issue Tracking
https://github.com/torvalds/linux/commit/af73483f4e8b6f5c68c9aa63257bdd929a9c194aPatch
https://access.redhat.com/errata/RHSA-2024:2394Vendor Advisory
https://access.redhat.com/errata/RHSA-2024:2950Vendor Advisory
https://access.redhat.com/errata/RHSA-2024:3138Vendor Advisory
https://access.redhat.com/security/cve/CVE-2023-6915Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2254982Issue Tracking
https://github.com/torvalds/linux/commit/af73483f4e8b6f5c68c9aa63257bdd929a9c194aPatch
https://lists.debian.org/debian-lts-announce/2024/06/msg00016.htmlMailing List, Third Party Advisory

Timeline

Published: Jan 15, 2024
Last modified: Nov 5, 2026
NVD status: Analyzed

Related CVEs from 2023

CVE-2023-69167.2Audit records for OpenAPI requests may include sensitive information. This could lead to unauthorized accesses and privilege escalation.CVE-2023-69176.7A vulnerability has been identified in the Performance Co-Pilot (PCP) package, stemming from the mixed privilege levels utilized by systemd CVE-2023-69185.3A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backen CVE-2023-69197.5Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal. This is CVE-2023-69219.1Blind SQL Injection vulnerability in PrestaShow Google Integrator (PrestaShop addon) allows for data extraction and modification. This attac CVE-2023-69226.5The Under Construction / Maintenance Mode from Acurax plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to CVE-2023-69236.1The Matomo Analytics – Ethical Stats. Powerful Insights. plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the idsite CVE-2023-69244.8The Photo Gallery by 10Web plugin for WordPress is vulnerable to Stored Cross-Site Scripting via widgets in versions up to, and including, 1 CVE-2023-69257.2The Unlimited Addons for WPBakery Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type va CVE-2023-69267.8There is an OS command injection vulnerability in Crestron AM-300 firmware version 1.4499.00018 which may enable a user of a limited-access CVE-2023-69276.1A flaw was found in Keycloak. This issue may allow an attacker to steal authorization codes or tokens from clients using a wildcard in the J CVE-2023-69289.8EuroTel ETL3100 versions v01c01 and v01x37 does not limit the number of attempts to guess administrative credentials in remote password atta