CVE-2023-4459

Summary

CVE-2023-4459 is a vulnerability affecting the vmxnet3 networking sub-component in the Linux Kernel. A NULL pointer dereference flaw was identified in the vmxnet3_rq_cleanup function located in drivers/net/vmxnet3/vmxnet3_drv.c. This issue poses a denial-of-service risk for local attackers with normal user privileges, as it involves a missing sanity check during cleanup. Consequentially, an attacker can exploit this vulnerability to induce a crash or system instability, impacting the system's availability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.