CVE-2023-0590

A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem. This flaw leads to a denial of service issue. If patch ebda44da44f6 ("net: sched: fix race condition in qdisc_graft()") not applied yet, then kernel could be affected.

Score

CVSS 3.1 4.7 Medium

Status

Modified - secalert@redhat.com

Published

2023-03-23

Last modified

2026-10-14

Weaknesses

CWE-416

Affected products

• Linux Kernel (Linux)
• Simatic S7-1500 Tm Mfp - Gnulinux Subsystem (Siemens)

References

• https://lore.kernel.org/all/20221018203258.2793282-1-edumazet%40google.com/
• https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html
• https://cert-portal.siemens.com/productcert/html/ssa-794697.html
• https://cert-portal.siemens.com/productcert/html/ssa-806742.html
• https://cert-portal.siemens.com/productcert/html/ssa-769027.html