CVE-2023-3090: Out-of-bounds write in Linux kernel's ipvlan network driver

Modified

AliasesRHSA-2023:4828UBUNTU-CVE-2023-3090DEBIAN-CVE-2023-3090

Published 28-06-2023Last modified 05-03-2025

Vulnerability summary

CVE-2023-3090 is a high (CVSS 7.8) Out-of-bounds Write vulnerability in debian debian_linux. EPSS estimates a 0.48% chance of exploitation in the next 30 days, higher than 41.3% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Prioritisepublic exploit

Public exploit (reference, Date unknown)

Source freshness unavailable

How is this decided?

CVSS score

7.8/10

010

High · v3.1 (CVE.org)

EPSS score

0.48%

0%100%

Low · -0.01 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 75 · Related 51

DLA-3508-1 DLA-3623-1 DSA-5448-1 DSA-5480-1 LSN-0097-1 LSN-0098-1+69 more

Timeline

28-06-2023
PublishedVulnerability first disclosed.
05-03-2025
Last modifiedVulnerability information updated.

Description

A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds write is caused by missing skb->cb initialization in the ipvlan network driver. The vulnerability is reachable if CONFIG_IPVLAN is enabled. We recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.

CVSS metrics

5 scores · 5 sources · 1 version

v3.17.8

EPSS trend

Probability

0.48%

Chance of exploitation in the next 30 days

Percentile

41%

Versus all other CVEs

30-day change

Decrease -0.01 pp

From 0.49% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

referenceUnverified
Exploit Reference (git.kernel.org)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu102 products

linux< 4.4.0-243.277 | < 4.15.0-214.225 | < 5.4.0-155.172 | < 5.15.0-78.85
linux-allwinner-5.19All versions (No fix recorded)
linux-aws< 4.4.0-1121.127 | < 4.4.0-1159.174 | < 4.15.0-1159.172 | < 5.4.0-1106.114 | < 5.15.0-1040.45
linux-aws-5.0All versions (No fix recorded)
linux-aws-5.11All versions (No fix recorded)

linux-aws-5.13All versions (No fix recorded)
linux-aws-5.15< 5.15.0-1040.45~20.04.1
linux-aws-5.19< 5.19.0-1029.30~22.04.1
linux-aws-5.3All versions (No fix recorded)
linux-aws-5.4< 5.4.0-1106.114~18.04.1
linux-aws-5.8All versions (No fix recorded)
linux-aws-6.2< 6.2.0-1008.8~22.04.1
linux-aws-fips< 4.15.0-2098.104 | All versions (No fix recorded) | < 5.4.0-1106.114+fips1
linux-aws-hwe< 4.15.0-1159.172~16.04.1
linux-azure< 4.15.0-1168.183~14.04.1 | < 4.15.0-1168.183~16.04.1 | All versions (No fix recorded) | < 5.4.0-1112.118 | < 5.15.0-1042.49
linux-azure-4.15< 4.15.0-1168.183
linux-azure-5.11All versions (No fix recorded)
linux-azure-5.13All versions (No fix recorded)
linux-azure-5.15< 5.15.0-1042.49~20.04.1
linux-azure-5.19All versions (No fix recorded)
linux-azure-5.3All versions (No fix recorded)
linux-azure-5.4< 5.4.0-1112.118~18.04.1
linux-azure-5.8All versions (No fix recorded)
linux-azure-edgeAll versions (No fix recorded)
linux-azure-fde< 5.15.0-1042.49.1
linux-azure-fde-5.19All versions (No fix recorded)
linux-azure-fips< 4.15.0-2077.83 | All versions (No fix recorded) | < 5.4.0-1112.118+fips1
linux-bluefield< 5.4.0-1068.74 | < 5.15.0-1021.23
linux-fips< 4.4.0-1091.98 | All versions (No fix recorded) | < 4.15.0-1114.125 | < 5.4.0-1081.90
linux-gcp< 4.15.0-1153.170~16.04.1 | All versions (No fix recorded) | < 5.4.0-1109.118 | < 5.15.0-1038.46
linux-gcp-4.15< 4.15.0-1153.170
linux-gcp-5.11All versions (No fix recorded)
linux-gcp-5.13All versions (No fix recorded)
linux-gcp-5.15< 5.15.0-1038.46~20.04.1
linux-gcp-5.19< 5.19.0-1030.32~22.04.1
linux-gcp-5.3All versions (No fix recorded)
linux-gcp-5.4< 5.4.0-1109.118~18.04.1
linux-gcp-5.8All versions (No fix recorded)
linux-gcp-6.2< 6.2.0-1010.10~22.04.1
linux-gcp-fips< 4.15.0-2061.66 | All versions (No fix recorded) | < 5.4.0-1109.118+fips1
linux-gke< 5.4.0-1104.111 | < 5.15.0-1038.43
linux-gke-4.15All versions (No fix recorded)
linux-gke-5.15< 5.15.0-1038.43~20.04.1
linux-gke-5.4All versions (No fix recorded)
linux-gkeop< 5.4.0-1073.77 | < 5.15.0-1024.29
linux-gkeop-5.15< 5.15.0-1024.29~20.04.1
linux-gkeop-5.4All versions (No fix recorded)
linux-hwe< 4.15.0-214.225~16.04.1 | All versions (No fix recorded)
linux-hwe-5.11All versions (No fix recorded)
linux-hwe-5.13All versions (No fix recorded)
linux-hwe-5.15< 5.15.0-78.85~20.04.1
linux-hwe-5.19< 5.19.0-50.50
linux-hwe-5.4< 5.4.0-155.172~18.04.1
linux-hwe-5.8All versions (No fix recorded)
linux-hwe-6.2< 6.2.0-26.26~22.04.1
linux-hwe-edgeAll versions (No fix recorded)
linux-ibm< 5.4.0-1053.58 | < 5.15.0-1034.37
linux-ibm-5.4< 5.4.0-1053.58~18.04.1
linux-intel-5.13All versions (No fix recorded)
linux-intel-iot-realtime< 5.15.0-1035.37
linux-intel-iotg< 5.15.0-1036.41
linux-intel-iotg-5.15< 5.15.0-1036.41~20.04.1
linux-iot< 5.4.0-1018.19
linux-kvm< 4.4.0-1122.132 | < 4.15.0-1143.148 | < 5.4.0-1095.101 | < 5.15.0-1038.43
linux-lowlatency< 5.15.0-78.85
linux-lowlatency-hwe-5.15< 5.15.0-78.85~20.04.1
linux-lowlatency-hwe-5.19All versions (No fix recorded)
linux-lowlatency-hwe-6.2< 6.2.0-1009.9~22.04.1
linux-lts-xenial< 4.4.0-243.277~14.04.1
linux-nvidia< 5.15.0-1029.29
linux-nvidia-6.2< 6.2.0-1009.9
linux-nvidia-tegra< 5.15.0-1016.16
linux-nvidia-tegra-5.15< 5.15.0-1016.16~20.04.1
linux-nvidia-tegra-igx< 5.15.0-1002.2
linux-oemAll versions (No fix recorded)
linux-oem-5.10All versions (No fix recorded)
linux-oem-5.13All versions (No fix recorded)
linux-oem-5.14All versions (No fix recorded)
linux-oem-5.17All versions (No fix recorded)
linux-oem-5.6All versions (No fix recorded)
linux-oem-6.0< 6.0.0-1021.21
linux-oem-6.1< 6.1.0-1016.16
linux-oracle< 4.15.0-1122.133~16.04.1 | < 4.15.0-1122.133 | < 5.4.0-1105.114 | < 5.15.0-1039.45
linux-oracle-5.0All versions (No fix recorded)
linux-oracle-5.11All versions (No fix recorded)
linux-oracle-5.13All versions (No fix recorded)
linux-oracle-5.15< 5.15.0-1039.45~20.04.1
linux-oracle-5.3All versions (No fix recorded)
linux-oracle-5.4< 5.4.0-1105.114~18.04.1
linux-oracle-5.8All versions (No fix recorded)
linux-raspi< 5.4.0-1090.101 | < 5.15.0-1034.37
linux-raspi-5.4< 5.4.0-1090.101~18.04.1
linux-raspi-realtimeAll versions (No fix recorded)
linux-raspi2All versions (No fix recorded)
linux-realtimeAll versions (No fix recorded) | < 5.15.0-1042.47
linux-riscvAll versions (No fix recorded)
linux-riscv-5.11All versions (No fix recorded)
linux-riscv-5.15< 5.15.0-1037.41~20.04.2
linux-riscv-5.19All versions (No fix recorded)
linux-riscv-5.8All versions (No fix recorded)
linux-starfive-5.19All versions (No fix recorded)
linux-xilinx-zynqmp< 5.4.0-1026.30 | < 5.15.0-1025.29

Show all 102

Redhat18 products

kpatch-patch-5_14_0-70_43_1< 0:1-6.el9_0
kpatch-patch-5_14_0-70_43_1-debuginfo< 0:1-6.el9_0
kpatch-patch-5_14_0-70_43_1-debugsource< 0:1-6.el9_0
kpatch-patch-5_14_0-70_49_1< 0:1-5.el9_0
kpatch-patch-5_14_0-70_49_1-debuginfo< 0:1-5.el9_0

Show all 18

Debian2 products

linux< 6.1.37-1 | < 6.3.7-1
debian_linuxEOL10.0 | 11.0 | 12.0

Linux2 products

kernel≥ 3.19, < 6.4
linux_kernel≥ 3.19, < 4.14.316 | ≥ 4.15, < 4.19.284 | ≥ 4.20, < 5.4.244 | ≥ 5.5, < 5.10.181 | ≥ 5.11, < 5.15.113 | ≥ 5.16, < 6.1.30 | ≥ 6.2, < 6.3.4

4 vendors · 124 products