CVE Feed

    Dashboard / CVE / CVE-2023-22024

    CVE-2023-22024

    In the Unbreakable Enterprise Kernel (UEK), the RDS module in UEK has two setsockopt(2) options, RDS_CONN_RESET and RDS6_CONN_RESET, that are not re-entrant. A malicious local user with CAP_NET_ADMIN can use this to crash the kernel. CVSS 3.1 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    Published:Sep 20, 2023
    Last Modified:Nov 21, 2024
    EPS:Sep 20, 2023
    EPSS Score:0.00035
    CVSS Score:5.5

    Affected Products

    Vendor
    Oracle
    Product
    Linux
    Vendor
    Oracle
    Product
    Vm Server

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-35233 (CVSS 4.4) — An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an out-of-range…
    CVE-2026-21996 (CVSS 3.3) — An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to…
    CVE-2026-21991 (CVSS 5.5) — A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.…
    CVE-2025-4598 (CVSS 4.7) — A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash a…
    CVE-2022-21385 (CVSS 6.2) — A flaw in net_rds_alloc_sgs() in Oracle Linux kernels allows unprivileged local users to crash the machine. CV…
    CVE-2022-21505 (CVSS 6.7) — In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated…
    CVE-2022-21504 (CVSS 5.5) — The code in UEK6 U3 was missing an appropiate file descriptor count to be missing. This resulted in a use coun…
    CVE-2022-21499 (CVSS 6.7) — KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An a…
    CVE-2021-2464 (CVSS 7.8) — Vulnerability in Oracle Linux (component: OSwatcher). Supported versions that are affected are 7 and 8. Easily…
    CVE-2021-3551 (CVSS 7.8) — A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credenti…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High