vulnti.work

A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past the end of an allocated buffer. This flaw …

Low CVSS 3.2
CVECVE-2023-39194
First seen2026-10-15 01:15 UTC
Disclosed2023-10-09 18:15 UTC
Last updated2026-10-15 01:15 UTC
Channel statusauto

Summary

A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past the end of an allocated buffer. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, potentially leading to an information disclosure.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

  • :
  • :
  • :

Sources

  • NVD DATABASE

Original Links

Timeline

  1. nvd_ingest NVD