CVE-2023-6679: Kernel: null pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c

Description

A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c in the Digital Phase Locked Loop (DPLL) subsystem in the Linux kernel. This issue could be exploited to trigger a denial of service.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack vector

Local

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

None

Integrity

None

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.3% · higher than 24% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

KE

Kernel · Linux

All versions, or not specified · source: NVD

RH

Red Hat Enterprise Linux 9 · Red Hat

All versions, or not specified · source: vendor

RH

Red Hat Enterprise Linux 9.2 Extended Update Support · Red Hat

All versions, or not specified · source: vendor

EL

Enterprise Linux · Redhat

9.0 · source: NVD

FE

Fedora · Fedoraproject

38 · source: NVD