Get real-time updates on Telegram
CVE-2023-54206: Linux 6.3
CVE-2023-54206. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00144 (percentile 0.03293), scored 14-Oct-2026.
Affected technology
Linux · 08a0063df3aed8d76a4034279117db12dbc1050f to before 253a3a324e0ebc2825de76a0f5f17b8383b2023d, 08a0063df3aed8d76a4034279117db12dbc1050f to before dd4f6bbfa646f258e5bcdfac57a5c413d687f588
Linux
Linux · 6.3
Linux
Component: Not specified by the source
File: net/sched/cls_flower.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Concurrent users can access the filter that is still being initialized and is in inconsistent state, which, in turn, can cause NULL pointer dereference [0]. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high.
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00144 · percentile 0.03293 · 2026-10-14
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-15 22:58:54.984414+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2023-54206.html