Null Pointer Dereference in Linux Kernel Due to IPv6 Extended Header

CVE-2023-53343

What is CVE-2023-53343?

A vulnerability in the Linux kernel allows a packet using link-local addresses in conjunction with IPv6 Extended Headers (RPL, SRv6, etc.) to be processed. If the routing engine fails to find a viable route for the packet, it leads to a potential null pointer dereference scenario where the input device is misconfigured. This can result in a system crash or unexpected behaviors during packet processing. Care should be taken to ensure proper handling of null pointers in these scenarios, as it may affect the stability and security of systems reliant on IPv6 networking.

References