In the Unbreakable Enterprise Kernel (UEK), the RDS module in UEK has two setsockopt(2)…
Priority LOW 24Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
In the Unbreakable Enterprise Kernel (UEK), the RDS module in UEK has two setsockopt(2) options, RDS_CONN_RESET and RDS6_CONN_RESET, that are not re-entrant. A malicious local user with CAP_NET_ADMIN can use this to crash the kernel. CVSS 3.1 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00179 7th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Oracle | Oracle Linux | Oracle Linux: 6; Oracle Linux: 7; Oracle Linux: 8; Oracle Linux: 9 | — | No fix listed | CNA |
| Oracle | Oracle VM | Oracle VM: 3 | — | No fix listed | CNA |
- Oracle Linux VendorOracle Affected Oracle Linux: 6; Oracle Linux: 7; Oracle Linux: 8; Oracle Linux: 9 Fixed in — No fix listed CNA
- Oracle VM VendorOracle Affected Oracle VM: 3 Fixed in — No fix listed CNA
CPE configurations NVD · 5
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:oracle:vm_server:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | Oracle |
| cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:* | 6 | Vulnerable | Oracle |
| cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:* | 7 | Vulnerable | Oracle |
| cpe:2.3:o:oracle:linux:8:-:*:*:*:*:*:* | 8 | Vulnerable | Oracle |
| cpe:2.3:o:oracle:linux:9:-:*:*:*:*:*:* | 9 | Vulnerable | Oracle |
- cpe:2.3:a:oracle:vm_server:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Oracle
- cpe:2.3:o:oracle:linux:6:-:*:*:*:*:*:* Versions 6 Vulnerable ·Oracle
- cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:* Versions 7 Vulnerable ·Oracle
- cpe:2.3:o:oracle:linux:8:-:*:*:*:*:*:* Versions 8 Vulnerable ·Oracle
- cpe:2.3:o:oracle:linux:9:-:*:*:*:*:*:* Versions 9 Vulnerable ·Oracle
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-22024
- 2026-10-03 Alias added: GHSA-22mc-c7v8-g2wp
References
Advisory 1
More Oracle Linux vulnerabilities
- TI-2016-02888 Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77… KEVCVSS 3.1CRITICAL 9.8
- TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
- TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
- TI-2015-04443 The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1… KEVCVSS 3.1HIGH 7.8
- TI-2014-02517 The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not… KEVCVSS 3.1HIGH 7.8
- TI-2015-00205 Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and… CVSS 2.0HIGH 10.0
Sources
- CVE-2023-22024 · CVE Program
- CVE-2023-22024 · NVD
- FIRST EPSS
- GHSA-22mc-c7v8-g2wp · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences