Rewterz Threat Advisory – CVE-2023-6679 – Linux Kernel Vulnerability

Severity

Medium

Analysis Summary

CVE-2023-6679

Linux Kernel is vulnerable to a denial of service, caused by a NULL pointer dereference flaw in the dpll_pin_parent_pin_set() function in drivers/dpll/dpll_netlink.c in the Digital Phase Locked Loop (DPLL) subsystem. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause a denial of service condition.

Impact

• Denial of Service

Indicators Of Compromise

CVE

• CVE-2023-6679

Affected Vendors

Linux

Affected Products

• Linux Kernel

Remediation

Refer to lore.kernel Website for patch, upgrade or suggested workaround information.

lore.kernel Website