CVE-2023-42755
CVE-2023-42755: 1 tracked advisory record across Red Hat. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Red Hat
1 advisory- Advisory severityMedium6.5
Medium [CVE-2023-42755] Kernel: rsvp: out-of-bounds read in rsvp_classify
CVE-2023-42755Source published Source updated
A flaw was found in the IPv4 Resource Reservation Protocol (RSVP) classifier in the Linux kernel. The xprt pointer may go beyond the linear part of the skb, leading to an out-of-bounds read in the `rsvp_classify` function. This issue may allow a local user to crash the system and cause a denial of service. The rsvp classifier has been retired upstream (commit 265b4da "net/sched: Retire rsvp classifier"). Red Hat Enterprise Linux 9 is not affected by this CVE. Red Hat severity: Moderate — CVSS 6.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H). Weakness: CWE-125. Will not fix / out of support: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7. Red Hat fixing advisory: RHSA-2024:2950, RHSA-2024:3138. Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat package…
- Affected products in this advisory
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat package: kernel-rt
- Source-reported affected versions
- Affected-version details not available in this record.
- Source-reported fixed versions
- kernel-rt-0:4.18.0-553.rt7.342.el8_10
- kernel-0:4.18.0-553.el8_10
- RHSA-2024:2950
- RHSA-2024:3138
- Mitigation guidance
- This flaw can be mitigated by preventing the affected `cls_rsvp` kernel module from being loaded. For instructions on how to blacklist a kernel module, please see https://access.redhat.com/solutions/41278.
Android app · Google Play
Monitor future Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.