Vulnerability Database

314,343

Total vulnerabilities in the database

CVE-2023-39194

A flaw was found in the XFRM subsystem in the Linux kernel. The specific flaw exists within the processing of state filters, which can result in a read past the end of an allocated buffer. This flaw allows a local privileged (CAP_NET_ADMIN) attacker to trigger an out-of-bounds read, potentially leading to an information disclosure.

  • Published: Oct 9, 2023
  • Updated: Nov 16, 2025
  • CVE: CVE-2023-39194
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 3.2
  • AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N

CWEs:

Software From Fixed in
linux / linux_kernel 6.5-rc1 6.5-rc1.x
linux / linux_kernel - 6.5
linux / linux_kernel 6.5-rc2 6.5-rc2.x
linux / linux_kernel 6.5-rc3 6.5-rc3.x
linux / linux_kernel 6.5-rc4 6.5-rc4.x
linux / linux_kernel 6.5-rc5 6.5-rc5.x
linux / linux_kernel 6.5-rc6 6.5-rc6.x
redhat / enterprise_linux 8.0 8.0.x
redhat / enterprise_linux 9.0 9.0.x
fedoraproject / fedora 38 38.x