Medium severity5.5NVD Advisory· Published Jul 25, 2023· Updated Jun 17, 2026

CVE-2023-3773

Description

A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to cause a 4 byte out-of-bounds read of XFRMA_MTIMER_THRESH when parsing netlink attributes, leading to potential leakage of sensitive heap data to userspace.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Red Hat/Enterprise Linux Servercpe-rescue7 versions
cpe:/a:redhat:enterprise_linux:9::appstream+ 6 more
- cpe:/a:redhat:enterprise_linux:9::appstreamrange: 0:5.14.0-362.8.1.el9_3
- cpe:/o:redhat:enterprise_linux:6
- cpe:/o:redhat:enterprise_linux:7
- cpe:/o:redhat:enterprise_linux:8
- cpe:/o:redhat:enterprise_linux:9
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
Debian/linux2 versions
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*
Fedoraproject/Fedora
cpe:2.3:o:fedoraproject:fedora:-:*:*:*:*:*:*:*
Linux/Kernel2 versions
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
- (no CPE)
osv-coords59 versions
pkg:apk/chainguard/hyperv-daemons pkg:apk/chainguard/hyperv-daemons-6.18 pkg:apk/chainguard/hyperv-daemons-generic pkg:apk/chainguard/linux pkg:apk/chainguard/linux-aws-6.12 pkg:apk/chainguard/linux-aws-6.12-boot-installed pkg:apk/chainguard/linux-aws-6.12-fips-boot-installed pkg:apk/chainguard/linux-aws-6.12-headers pkg:apk/chainguard/linux-aws-6.12-modules pkg:apk/chainguard/linux-aws-6.18 pkg:apk/chainguard/linux-aws-6.18-boot-installed pkg:apk/chainguard/linux-aws-6.18-fips-boot-installed pkg:apk/chainguard/linux-aws-6.18-headers pkg:apk/chainguard/linux-aws-6.18-modules pkg:apk/chainguard/linux-aws-generic pkg:apk/chainguard/linux-aws-generic-boot-configuration pkg:apk/chainguard/linux-aws-generic-boot-installed pkg:apk/chainguard/linux-aws-generic-fips-boot-installed pkg:apk/chainguard/linux-aws-generic-headers pkg:apk/chainguard/linux-aws-generic-modules pkg:apk/chainguard/linux-azure-6.12 pkg:apk/chainguard/linux-azure-6.18 pkg:apk/chainguard/linux-azure-6.18-boot-installed pkg:apk/chainguard/linux-azure-6.18-fips-boot-installed pkg:apk/chainguard/linux-azure-6.18-headers pkg:apk/chainguard/linux-azure-6.18-modules pkg:apk/chainguard/linux-azure-generic pkg:apk/chainguard/linux-azure-generic-boot-configuration pkg:apk/chainguard/linux-azure-generic-boot-installed pkg:apk/chainguard/linux-azure-generic-fips-boot-installed pkg:apk/chainguard/linux-azure-generic-headers pkg:apk/chainguard/linux-azure-generic-modules pkg:apk/chainguard/linux-boot-configuration pkg:apk/chainguard/linux-boot-installed pkg:apk/chainguard/linux-gcp-6.12 pkg:apk/chainguard/linux-gcp-6.18 pkg:apk/chainguard/linux-gcp-6.18-boot-installed pkg:apk/chainguard/linux-gcp-6.18-fips-boot-installed pkg:apk/chainguard/linux-gcp-6.18-headers pkg:apk/chainguard/linux-gcp-6.18-modules pkg:apk/chainguard/linux-gcp-generic pkg:apk/chainguard/linux-gcp-generic-boot-installed pkg:apk/chainguard/linux-gcp-generic-fips-boot-installed pkg:apk/chainguard/linux-gcp-generic-headers pkg:apk/chainguard/linux-gcp-generic-modules pkg:apk/chainguard/linux-modules pkg:apk/chainguard/linux-qemu-6.12 pkg:apk/chainguard/linux-qemu-6.18 pkg:apk/chainguard/linux-qemu-generic pkg:apk/chainguard/linux-qemu-generic-bootc-boot-installed pkg:apk/chainguard/linux-qemu-melange pkg:apk/chainguard/linux-qemu-rc pkg:apk/chainguard/linux-qemu-rc-boot-installed pkg:apk/chainguard/linux-qemu-rc-fips-boot-installed pkg:apk/chainguard/linux-qemu-rc-headers pkg:apk/chainguard/linux-qemu-rc-modules pkg:apk/chainguard/linux-vmware-6.12 pkg:apk/chainguard/linux-vmware-6.18 pkg:apk/chainguard/linux-vmware-generic
< 0+ 58 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 6.18.5-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0

Patches

Vulnerability mechanics

References

access.redhat.com/security/cve/CVE-2023-3773nvdThird Party Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
access.redhat.com/errata/RHSA-2023:6583nvd
lists.debian.org/debian-lts-announce/2023/10/msg00027.htmlnvd
www.debian.org/security/2023/dsa-5492nvd

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000