CVE-2023-1390 : A remote denial of service vulnerability was found in the Linux kernel’s TIPC

A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system to instantly spike to 100%, causing a denial of service condition.

Published 2023-03-16 21:15:11

Updated 2023-06-07 12:46:28

Source Red Hat, Inc.

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2023-1390

Linux » Linux Kernel
Versions from including (>=) 4.20 and before (<) 5.4.92
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 4.15 and before (<) 4.19.170
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 5.5 and before (<) 5.10.10
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 4.3 and before (<) 4.9.253
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions from including (>=) 4.10 and before (<) 4.14.217
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel » Version: 5.11 Update RC3
cpe:2.3:o:linux:linux_kernel:5.11:rc3:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel » Version: 5.11 Update RC2
cpe:2.3:o:linux:linux_kernel:5.11:rc2:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel » Version: 5.11 Update RC1
cpe:2.3:o:linux:linux_kernel:5.11:rc1:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2023-1390

EPSS FAQ

0.27%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 68 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-1390

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2023-1390

CWE-1050 Excessive Platform Resource Consumption within a Loop

The product has a loop body or loop condition that contains a control element that directly or indirectly consumes platform resources, e.g. messaging, sessions, locks, or file descriptors.

Assigned by: secalert@redhat.com (Secondary)

References for CVE-2023-1390

https://infosec.exchange/@_mattata/109427999461122360

remy🐀: "Ever seen a network protocol p…" - Infosec Exchange
Exploit;Patch;Third Party Advisory
https://gist.github.com/netspooky/bee2d07022f6350bb88eaa48e571d9b5

tipc_analysis.md · GitHub
Third Party Advisory
https://security.netapp.com/advisory/ntap-20230420-0001/

CVE-2023-1390 Linux Kernel Vulnerability in NetApp Products | NetApp Product Security
Third Party Advisory
https://github.com/torvalds/linux/commit/b77413446408fdd256599daf00d5be72b5f3e7c6

tipc: fix NULL deref in tipc_link_xmit() · torvalds/linux@b774134 · GitHub
Patch;Vendor Advisory

Jump to

Vulnerability Details : CVE-2023-1390

Products affected by CVE-2023-1390

Exploit prediction scoring system (EPSS) score for CVE-2023-1390

CVSS scores for CVE-2023-1390

CWE ids for CVE-2023-1390

References for CVE-2023-1390