CVE-2023-22024 Denial of service in Oracle Linux
A local attacker with CAP_NET_ADMIN can crash the kernel via non-reentrant RDS module options, causing denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-22024?
CVE-2023-22024 is a medium-severity denial of service vulnerability in Oracle Linux, published on 20 Sep 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Unbreakable Enterprise Kernel (UEK), the RDS module in UEK has two setsockopt(2) options, RDS_CONN_RESET and RDS6_CONN_RESET, that are not re-entrant. A malicious local user with CAP_NET_ADMIN can use this to crash the kernel. CVSS 3.1 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Which versions are affected by CVE-2023-22024?
It affects 2 products.
Products include Oracle Linux, Oracle Vm Server.
How do I fix CVE-2023-22024?
No fix has been published for CVE-2023-22024 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2023-22024 being exploited?
There is no known exploitation of CVE-2023-22024 in the wild and no public exploit code.
Other vulnerabilities in Oracle Linux
Sources
Also known as GHSA-22mc-c7v8-g2wp.