vulnerability

Red Hat: CVE-2023-3090: out-of-bounds write caused by unclear skb->cb (Multiple Advisories)

Name: Red Hat: CVE-2023-3090: out-of-bounds write caused by unclear skb->cb (Multiple Advisories)
Creator: Red Hat
Published: 2023-06-28T00:00:00.000Z
Keywords: CVE, CWE-787, Red Hat, 2023, 3090, out, redhat-upgrade-kernel, redhat-upgrade-kernel-rt, Severity 7

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:L/Au:S/C:C/I:C/A:C)

Published

Jun 28, 2023

Added

Aug 2, 2023

Modified

Mar 27, 2026

Description

A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.

The out-of-bounds write is caused by missing skb->cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG_IPVLAN is enabled.

We recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.

Solutions

redhat-upgrade-kernelredhat-upgrade-kernel-rt

References

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report