CVE-2023-1390

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-1390
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-1390.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-1390
Downstream
Related
Published
2023-03-16T00:00:00Z
Modified
2026-07-15T01:49:12.714487453Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipclinkxmit() hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system to instantly spike to 100%, causing a denial of service condition.

Database specific 
{
    "cwe_ids": [
        "CWE-1050"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/1xxx/CVE-2023-1390.json",
    "cna_assigner": "redhat"
}
References

Affected packages

Git / github.com/torvalds/linux

Affected ranges

Type
GIT
Repo
https://github.com/torvalds/linux
Events
Introduced
19c329f6808995b142b3966301f217c831e7cf31
Last affected
19c329f6808995b142b3966301f217c831e7cf31
Database specific 
{
    "extracted_events": [
        {
            "introduced": "Fixed in kernel 5.11-rc4"
        },
        {
            "last_affected": "Fixed in kernel 5.11-rc4"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

Fixed in kernel 5.*
Fixed in kernel 5.11-rc4
v5.*
v5.11-rc4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-1390.json"