CVE-2023-0160
Possibility of deadlock in libbpf function sock_hash_delete_elem
MEDIUM 5.5EPSS 0.3%
A deadlock flaw was found in the Linux kernel’s BPF subsystem. This flaw allows a local user to potentially crash the system.
- Affected
- Red Hat · Fedora · kernel · Red Hat Enterprise Linux 6 · Red Hat Enterprise Linux 7 · Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 9
- CVSS v3.1 NVD
- 5.5 MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVSS v3.1 REDHAT
- 4.7 MEDIUM
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H - EPSS
- 0.29% chance of exploitation in the next 30 days, 20th percentile
- Published
- 2023-07-18
- Updated
- 2024-09-26
Proof-of-concept exploits (1)
Security advisories
- https://lore.kernel.org/all/CABcoxUayum5oOqFMMqAeWuS8+EzojquSOSyDA3J_2omY=2EeAg@mail.gmai…
- https://access.redhat.com/security/cve/CVE-2023-0160
- https://bugzilla.redhat.com/show_bug.cgi?id=2159764
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ed17aa92dc56