VYPR
Unrated severityNVD Advisory· Published Jun 28, 2023· Updated Mar 5, 2025

Out-of-bounds write in Linux kernel's ipvlan network driver

CVE-2023-3090

Description

A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.

The out-of-bounds write is caused by missing skb->cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG_IPVLAN is enabled.

We recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

332

Patches

Vulnerability mechanics

References

9

News mentions

0

No linked articles in our index yet.