CVE-2023-1390

HIGH

Linux Kernel 4.3-4.9.252 - Denial of Service via TIPC Module SKB Parsing

Title source: llm
STIX 2.1

Description

A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system to instantly spike to 100%, causing a denial of service condition.

References (4)

Core 4

Scores

CVSS v3 7.5
EPSS 0.0510
EPSS Percentile 91.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-1050
Status published
Products (2)
linux/linux_kernel 5.11 rc1 (3 CPE variants)
linux/linux_kernel 4.3 - 4.9.253
Published Mar 16, 2023
Tracked Since Feb 18, 2026