← Database

CVE-2023-2166

MEDIUM CVSS: 5.5 Published: 2023-04-19 Modified: 2026-06-17

Description

A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in the receive path of CAN frames. A local user could use this flaw to crash the system or potentially cause a denial of service.

Affected Platforms

Linux Linux Kernel

Weakness Type

CWE-476, CWE-476, CWE-476

References