CVE-2023-42755

Summary

CVE-2023-42755 is a vulnerability affecting the IPv4 Resource Reservation Protocol (RSVP) classifier in the Linux kernel. The issue arises due to the xprt pointer in the `rsvp_classify` function potentially exceeding the boundaries of the skb, resulting in an out-of-bounds read. This flaw can be exploited by a local user to cause a system crash and induce a denial of service.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.