Read the docs
TI-2023-04117 Aliases CVE-2023-4459GHSA-p788-v6c7-5vqg

Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()

Priority LOW 24CWE-476Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 18 fixed, 4 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-476.

Summary

A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with normal user privilege to cause a denial of service due to a missing sanity check during cleanup.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00249 16th percentileScored 2026-11-07
Fix Partial Red Hat: 7 advisoriesRed Hat: 18 fixed, 4 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Red HatRed Hat Enterprise Linux 8.2 Advanced Update Support—4.18.0-193.133.1.el8_2Patch availableCNA
Red HatRed Hat Enterprise Linux 8.2 Telecommunications Update Service—4.18.0-193.133.1.rt13.184.el8_2Patch availableCNA
Red HatRed Hat Enterprise Linux 8.2 Telecommunications Update Service—4.18.0-193.133.1.el8_2Patch availableCNA
Red HatRed Hat Enterprise Linux 8.2 Update Services for SAP Solutions—4.18.0-193.133.1.el8_2Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support—4.18.0-305.125.1.el8_4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Telecommunications Update Service—4.18.0-305.125.1.rt7.201.el8_4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Telecommunications Update Service—4.18.0-305.125.1.el8_4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Update Services for SAP Solutions—4.18.0-305.125.1.el8_4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support—4.18.0-372.87.1.el8_6Patch availableCNA
Red HatRed Hat Enterprise Linux 9.0 Extended Update Support—5.14.0-70.93.2.el9_0Patch availableCNA
Red HatRed Hat Enterprise Linux 9.0 Extended Update Support—5.14.0-70.93.1.rt21.165.el9_0Patch availableCNA
Red HatRed Hat Virtualization 4 for Red Hat Enterprise Linux 8—4.18.0-372.87.1.el8_6Patch availableCNA
Red HatRed Hat Enterprise Linux 6——No fix listedCNA
Red HatRed Hat Enterprise Linux 7——No fix listedCNA
Red HatRed Hat Enterprise Linux 7——No fix listedCNA
Red HatRed Hat Enterprise Linux 8——No fix listedCNA
Red HatRed Hat Enterprise Linux 8——No fix listedCNA
Red HatRed Hat Enterprise Linux 9——No fix listedCNA
Red HatRed Hat Enterprise Linux 9——No fix listedCNA
  • Red Hat Enterprise Linux 8.2 Advanced Update Support VendorRed Hat Affected — Fixed in 4.18.0-193.133.1.el8_2 Patch available CNA
  • Red Hat Enterprise Linux 8.2 Telecommunications Update Service VendorRed Hat Affected — Fixed in 4.18.0-193.133.1.rt13.184.el8_2 Patch available CNA
  • Red Hat Enterprise Linux 8.2 Telecommunications Update Service VendorRed Hat Affected — Fixed in 4.18.0-193.133.1.el8_2 Patch available CNA
  • Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 4.18.0-193.133.1.el8_2 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 4.18.0-305.125.1.el8_4 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Telecommunications Update Service VendorRed Hat Affected — Fixed in 4.18.0-305.125.1.rt7.201.el8_4 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Telecommunications Update Service VendorRed Hat Affected — Fixed in 4.18.0-305.125.1.el8_4 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 4.18.0-305.125.1.el8_4 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Extended Update Support VendorRed Hat Affected — Fixed in 4.18.0-372.87.1.el8_6 Patch available CNA
  • Red Hat Enterprise Linux 9.0 Extended Update Support VendorRed Hat Affected — Fixed in 5.14.0-70.93.2.el9_0 Patch available CNA
  • Red Hat Enterprise Linux 9.0 Extended Update Support VendorRed Hat Affected — Fixed in 5.14.0-70.93.1.rt21.165.el9_0 Patch available CNA
  • Red Hat Virtualization 4 for Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 4.18.0-372.87.1.el8_6 Patch available CNA
  • Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*before 5.18VulnerableLinux
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*8.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*9.0VulnerableRed Hat
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions before 5.18 Vulnerable ·Linux
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat

Remediation

Red Hat 7 advisories

  • RHSA-2024:2006 Released 2024-04-23 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux BaseOS AUS (v. 8.2) bpftool-4.18.0-193.133.1.el8_2, kernel-4.18.0-193.133.1.el8_2, kernel-abi-whitelists-4.18.0-193.133.1.el8_2 +14
    • Red Hat Enterprise Linux BaseOS E4S (v. 8.2) bpftool-4.18.0-193.133.1.el8_2, kernel-4.18.0-193.133.1.el8_2, kernel-abi-whitelists-4.18.0-193.133.1.el8_2 +14
    • Red Hat Enterprise Linux BaseOS TUS (v. 8.2) bpftool-4.18.0-193.133.1.el8_2, kernel-4.18.0-193.133.1.el8_2, kernel-abi-whitelists-4.18.0-193.133.1.el8_2 +14
  • RHSA-2024:2008 Released 2024-04-23 · Red Hat rating Important
    kernel-rt security update
    • Red Hat Enterprise Linux Real Time TUS (v. 8.2) kernel-rt-4.18.0-193.133.1.rt13.184.el8_2, kernel-rt-core-4.18.0-193.133.1.rt13.184.el8_2, kernel-rt-debug-4.18.0-193.133.1.rt13.184.el8_2 +7
    • Red Hat Enterprise Linux Real Time for NFV TUS (v. 8.2) kernel-rt-4.18.0-193.133.1.rt13.184.el8_2, kernel-rt-core-4.18.0-193.133.1.rt13.184.el8_2, kernel-rt-debug-4.18.0-193.133.1.rt13.184.el8_2 +9
  • RHSA-2024:1382 Released 2024-03-19 · Red Hat rating Important
    kernel-rt security and bug fix update
    • Red Hat Enterprise Linux NFV TUS (v.8.4) kernel-rt-4.18.0-305.125.1.rt7.201.el8_4, kernel-rt-core-4.18.0-305.125.1.rt7.201.el8_4, kernel-rt-debug-4.18.0-305.125.1.rt7.201.el8_4 +9
    • Red Hat Enterprise Linux RT TUS (v.8.4) kernel-rt-4.18.0-305.125.1.rt7.201.el8_4, kernel-rt-core-4.18.0-305.125.1.rt7.201.el8_4, kernel-rt-debug-4.18.0-305.125.1.rt7.201.el8_4 +7
Show 4 more Red Hat advisories
  • RHSA-2024:1367 Released 2024-03-19 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.4) bpftool-4.18.0-305.125.1.el8_4, kernel-4.18.0-305.125.1.el8_4, kernel-abi-stablelists-4.18.0-305.125.1.el8_4 +14
    • Red Hat Enterprise Linux BaseOS E4S (v.8.4) bpftool-4.18.0-305.125.1.el8_4, kernel-4.18.0-305.125.1.el8_4, kernel-abi-stablelists-4.18.0-305.125.1.el8_4 +14
    • Red Hat Enterprise Linux BaseOS TUS (v.8.4) bpftool-4.18.0-305.125.1.el8_4, kernel-4.18.0-305.125.1.el8_4, kernel-abi-stablelists-4.18.0-305.125.1.el8_4 +14
  • RHSA-2024:1306 Released 2024-03-13 · Red Hat rating Important
    kernel-rt security and bug fix update
    • Red Hat Enterprise Linux Real Time EUS (v.9.0) kernel-rt-5.14.0-70.93.1.rt21.165.el9_0, kernel-rt-core-5.14.0-70.93.1.rt21.165.el9_0, kernel-rt-debug-5.14.0-70.93.1.rt21.165.el9_0 +7
    • Red Hat Enterprise Linux Real Time for NFV EUS (v.9.0) kernel-rt-5.14.0-70.93.1.rt21.165.el9_0, kernel-rt-core-5.14.0-70.93.1.rt21.165.el9_0, kernel-rt-debug-5.14.0-70.93.1.rt21.165.el9_0 +9
  • RHSA-2024:1250 Released 2024-03-12 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat CodeReady Linux Builder EUS (v.9.0) kernel-tools-libs-devel-5.14.0-70.93.2.el9_0
    • Red Hat Enterprise Linux AppStream EUS (v.9.0) kernel-debug-devel-5.14.0-70.93.2.el9_0, kernel-debug-devel-matched-5.14.0-70.93.2.el9_0, kernel-devel-5.14.0-70.93.2.el9_0 +5
    • Red Hat Enterprise Linux BaseOS EUS (v.9.0) bpftool-5.14.0-70.93.2.el9_0, kernel-5.14.0-70.93.2.el9_0, kernel-abi-stablelists-5.14.0-70.93.2.el9_0 +14
  • RHSA-2024:0412 Released 2024-01-25 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat CodeReady Linux Builder EUS (v.8.6) kernel-tools-libs-devel-4.18.0-372.87.1.el8_6
    • Red Hat Enterprise Linux BaseOS EUS (v.8.6) bpftool-4.18.0-372.87.1.el8_6, kernel-4.18.0-372.87.1.el8_6, kernel-abi-stablelists-4.18.0-372.87.1.el8_6 +19
    • Red Hat Virtualization 4 Hypervisor for RHEL 8 kernel-devel-4.18.0-372.87.1.el8_6, perf-4.18.0-372.87.1.el8_6

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 7AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 8AffectedNo fix yet
Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat CodeReady Linux Builder EUS (v.8.6)Fixed RHSA-2024:0412
Red Hat CodeReady Linux Builder EUS (v.9.0)Fixed RHSA-2024:1250
Red Hat Enterprise Linux AppStream EUS (v.9.0)Fixed RHSA-2024:1250
Red Hat Enterprise Linux BaseOS AUS (v. 8.2)Fixed RHSA-2024:2006
Red Hat Enterprise Linux BaseOS AUS (v.8.4)Fixed RHSA-2024:1367
Red Hat Enterprise Linux BaseOS E4S (v. 8.2)Fixed RHSA-2024:2006
Red Hat Enterprise Linux BaseOS E4S (v.8.4)Fixed RHSA-2024:1367
Red Hat Enterprise Linux BaseOS EUS (v.8.6)Fixed RHSA-2024:0412
Red Hat Enterprise Linux BaseOS EUS (v.9.0)Fixed RHSA-2024:1250
Red Hat Enterprise Linux BaseOS TUS (v. 8.2)Fixed RHSA-2024:2006
Red Hat Enterprise Linux BaseOS TUS (v.8.4)Fixed RHSA-2024:1367
Red Hat Enterprise Linux NFV TUS (v.8.4)Fixed RHSA-2024:1382
Red Hat Enterprise Linux RT TUS (v.8.4)Fixed RHSA-2024:1382
Red Hat Enterprise Linux Real Time EUS (v.9.0)Fixed RHSA-2024:1306
Red Hat Enterprise Linux Real Time TUS (v. 8.2)Fixed RHSA-2024:2008
Red Hat Enterprise Linux Real Time for NFV EUS (v.9.0)Fixed RHSA-2024:1306
Red Hat Enterprise Linux Real Time for NFV TUS (v. 8.2)Fixed RHSA-2024:2008
Red Hat Virtualization 4 Hypervisor for RHEL 8Fixed RHSA-2024:0412

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-4459
  2. 2026-10-03 Alias added: GHSA-p788-v6c7-5vqg
  3. 2026-10-08 CISA SSVC decision points changed

References

Patch 2

Advisory 8

  • TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-10530 Code injection in [UNKNOWN] RichFaces KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-23530 Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf… KEVCVSS 3.1CRITICAL 9.3
  • TI-2021-17490 mod_proxy SSRF KEVCVSS 3.1CRITICAL 9.0
See all 1955 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences