CVE-2023-3812

Published: Jul 24, 2023

Modified: Feb 26, 2026

PUBLISHED

CVSS v3.1

7.8

HIGH

Description

An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Vendor	Product	Versions
Red Hat	Red Hat Enterprise Linux 8	unaffected `0:4.18.0-513.9.1.rt7.311.el8_9 - < *`
Red Hat	Red Hat Enterprise Linux 8	unaffected `0:4.18.0-513.9.1.el8_9 - < *`
Red Hat	Red Hat Enterprise Linux 8	All versions
Red Hat	Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions	All versions
Red Hat	Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions	unaffected `0:4.18.0-147.94.1.el8_1 - < *`
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	unaffected `0:4.18.0-193.133.1.el8_2 - < *`
Red Hat	Red Hat Enterprise Linux 8.2 Telecommunications Update Service	unaffected `0:4.18.0-193.133.1.rt13.184.el8_2 - < *`
Red Hat	Red Hat Enterprise Linux 8.2 Telecommunications Update Service	unaffected `0:4.18.0-193.133.1.el8_2 - < *`
Red Hat	Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions	All versions
Red Hat	Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions	unaffected `0:4.18.0-193.133.1.el8_2 - < *`
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	unaffected `0:4.18.0-305.120.1.el8_4 - < *`
Red Hat	Red Hat Enterprise Linux 8.4 Telecommunications Update Service	unaffected `0:4.18.0-305.120.1.rt7.196.el8_4 - < *`
Red Hat	Red Hat Enterprise Linux 8.4 Telecommunications Update Service	unaffected `0:4.18.0-305.120.1.el8_4 - < *`
Red Hat	Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	unaffected `0:4.18.0-305.120.1.el8_4 - < *`
Red Hat	Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	All versions
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support	All versions
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support	unaffected `0:4.18.0-372.87.1.el8_6 - < *`
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	All versions
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	unaffected `0:4.18.0-477.43.1.el8_8 - < *`
Red Hat	Red Hat Enterprise Linux 9	unaffected `0:5.14.0-362.18.1.el9_3 - < *`
Red Hat	Red Hat Enterprise Linux 9	All versions
Red Hat	Red Hat Enterprise Linux 9	unaffected `0:5.14.0-362.18.1.el9_3 - < *`
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	unaffected `0:5.14.0-70.80.1.el9_0 - < *`
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	unaffected `0:5.14.0-70.80.1.rt21.151.el9_0 - < *`
Red Hat	Red Hat Enterprise Linux 9.0 Extended Update Support	All versions
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	unaffected `0:5.14.0-284.40.1.el9_2 - < *`
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	unaffected `0:5.14.0-284.40.1.rt14.325.el9_2 - < *`
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	All versions
Red Hat	Red Hat Virtualization 4 for Red Hat Enterprise Linux 8	unaffected `0:4.18.0-372.87.1.el8_6 - < *`
Red Hat	Red Hat Enterprise Linux 6	All versions
Red Hat	Red Hat Enterprise Linux 7	All versions
Red Hat	Red Hat Enterprise Linux 7	All versions
Red Hat	Red Hat Enterprise Linux 9	All versions