CVE-2023-6176
Aliases:UBUNTU-CVE-2023-6176DEBIAN-CVE-2023-6176CGA-29c8-mvxj-jvwqCGA-2cj7-r9r4-3xx6CGA-2cw4-v969-gcg5CGA-2h23-8mp6-x44hCGA-2v2q-4m6v-q2hfCGA-2x2h-gh5x-28fqCGA-2xvp-5c57-mph5CGA-35h3-h33v-fr49CGA-3h5r-h9h4-69wpCGA-457j-jcvw-jqrfCGA-4862-fjh6-95cgCGA-496r-x83h-qxjgCGA-4cg9-chv3-r2x9CGA-4x59-68wq-qwjqCGA-4xr2-38w6-pjrmCGA-56cr-2q6c-m66hCGA-58w5-6g59-9m48CGA-5f9x-2jxv-h5jhCGA-5pq3-jvf3-vh7pCGA-63qq-2w29-q76pCGA-6429-2vp8-cqp4CGA-66vv-3fr8-7p83CGA-6cxh-rrp6-f6vmCGA-6g75-hg64-332wCGA-6g7v-fp79-f6cmCGA-6hp6-6hcr-v6f9CGA-6vcg-v3w8-3wrxCGA-777f-g5hx-rv64CGA-7fvj-7925-c49qCGA-7wcj-vv3x-gfw3CGA-7x8c-gw6r-6cw7CGA-849q-wfg4-p725CGA-86cp-v25r-wc7jCGA-86q4-w96f-5f46CGA-87c6-wcq6-xm93CGA-88f9-6f6r-xvvfCGA-8m39-x87f-xjg8CGA-8pxx-rgh7-phpvCGA-94wp-574r-4jwmCGA-95xc-9h7f-92gxCGA-96xv-3x79-9cphCGA-9h2m-67r3-w3gjCGA-9j63-655w-7p5jCGA-c3hx-6mqm-2j22CGA-c4hq-4vjr-2wv3CGA-c4jh-j4rr-7g4rCGA-c5f3-pw95-6xr3CGA-c782-gvcc-3q64CGA-c8vc-rx8f-4q2pCGA-c98f-wcff-jwm4CGA-cff4-xcc4-3645CGA-cgmx-gxvj-753mCGA-f2mg-jf23-wq7rCGA-f524-jph6-fjv2CGA-fj7p-68wr-xmh2CGA-frqf-xp5h-cqr6CGA-frv3-qrhm-6hh9CGA-g228-cqfr-w97wCGA-gffw-93gq-q6m7CGA-gg3f-pcxc-cmwcCGA-gmvq-6f94-fxrvCGA-h3h8-pm76-fw33CGA-h69p-hghg-j63xCGA-h8w4-x352-vvccCGA-h9v8-664m-8vvjCGA-hr5v-9rm5-6q92CGA-jq87-7w34-4cvxCGA-jv25-m8c7-r2hpCGA-m2rp-v595-vr6mCGA-m98f-gph6-hcgcCGA-mp2r-7m54-9rm5CGA-mrg4-w5px-3qv3CGA-p622-x9qj-rcj5CGA-p882-8752-2h8hCGA-p8x4-g726-q53rCGA-p9cc-q32q-57rmCGA-pff4-g5c9-j5jmCGA-pjv6-9w2h-hcj5CGA-q373-r97p-mjjvCGA-q8x2-9qjp-cmvgCGA-r59r-cwh5-hvr3CGA-r68c-c537-c9chCGA-r69w-pvvf-46jjCGA-rrx4-gxmg-29rxCGA-v3ff-v9hc-qrq8CGA-v4mw-x72h-47cmCGA-v5jp-w8q9-4hmpCGA-v88j-x2rj-m4xpCGA-v8rf-fr22-5fh2CGA-vc36-5fwj-frcqCGA-vc49-gfx5-cr4wCGA-vfcf-f4h8-gmwcCGA-vh89-gfwq-g26mCGA-vhhp-xg2r-6378CGA-vhwg-74fq-8vwhCGA-vmhc-9q42-mpqcCGA-vxx4-2336-997pCGA-w54w-6fhw-7v44CGA-w64q-q8qr-hh9hCGA-w8gw-xh54-482gCGA-wcq3-w237-5wpcCGA-wg6j-xxjq-cg2vCGA-wgfr-w76g-rwh5CGA-wjc6-4grx-9r7qCGA-wm3x-p4g9-gx8mCGA-wq3p-6h75-8xwrCGA-wx6m-p4p7-fx2wCGA-x367-2w2j-cvf7CGA-x497-qv34-cq9wCGA-x9qx-4w4x-vq7wCGA-xm4m-6grc-qj25CGA-xp5v-89gc-c5mhCGA-xvcq-8f4j-93wfCGA-xw83-f86c-67mqCGA-4vqq-fv5v-5w9vCGA-9gx4-2mvq-qvqfCGA-2qq6-p67q-pwpjCGA-57g6-hq9m-rrf3CGA-9j37-2qmq-ghrrCGA-c7wj-7rqf-fjr6CGA-f779-c9jf-qq9cCGA-mvg6-mgwg-3298CGA-prhx-rjjf-8cprCGA-pvgr-fm4g-2j6gCGA-q7fp-3c5c-mwccCGA-v5hp-hhhp-vxc7CGA-v77f-gwgm-xxrpCGA-vmx6-3xwj-3hq7CGA-wf9g-m2hg-mq7vCGA-x682-qh4r-wfp9CGA-2h9r-grvf-3j28CGA-8v5m-p5jw-gp54CGA-ch4h-wxm5-w68jCGA-h5hv-w75q-rjq5CGA-mrm9-hch5-rc9rCGA-pr9g-mm9q-jfj7CGA-89xw-5pqc-8jf9CGA-6jjj-92v2-5v3hCGA-73j2-6rc7-xvr5CGA-rv3g-xj98-fh4v
Advisory lineage Upstream: 0 Downstream: 43
Modified
Published: 16 Nov 2023, 17:15
Last modified:06 Nov 2025, 20:01
Vulnerability Summary
Overall Risk (default)
low
19/100 CVSS Score
4.7 MEDIUM
v3.1 (cve.org)
EPSS Score
0.25% LOW
0% probability +0.24%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
16 Nov 2023, 17:15
Published
Vulnerability first disclosed
06 Nov 2025, 20:01
Last Modified
Vulnerability information updated
Description
A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functionality. This issue occurs when a user constructs a malicious packet with specific socket configuration, which could allow a local user to crash the system or escalate their privileges on the system.
CVSS Metrics
- v3.1•MEDIUM•Score: 4.7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Trends
Current EPSS score: 0.25%• Percentile: 17%
Techniques & Countermeasures
- CWE-476•NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Systems
- chainguard•hyperv-daemons-6.18
< 0
- chainguard•hyperv-daemons-generic
< 0
- chainguard•linux-aws-6.12
< 6.12.65-r0 | < 0
- chainguard•linux-aws-6.12-boot-installed
< 0
- chainguard•linux-aws-6.12-fips-boot-installed
< 0
- chainguard•linux-aws-6.12-headers
< 0
- chainguard•linux-aws-6.12-modules
< 0
- chainguard•linux-aws-6.18
< 6.18.10-r0 | < 0
- chainguard•linux-aws-6.18-boot-installed
< 0
- chainguard•linux-aws-6.18-fips-boot-installed
< 0
- chainguard•linux-aws-6.18-headers
< 0
- chainguard•linux-aws-6.18-modules
< 0
- chainguard•linux-aws-generic
< 6.18.5-r0 | < 0
- chainguard•linux-aws-generic-boot-installed
< 0
- chainguard•linux-aws-generic-fips-boot-installed
< 0
- chainguard•linux-aws-generic-headers
< 0
- chainguard•linux-aws-generic-modules
< 0
- chainguard•linux-azure-6.12
< 0 | < 6.12.65-r1
- chainguard•linux-azure-6.18
< 0
- chainguard•linux-azure-6.18-boot-installed
< 0
- chainguard•linux-azure-6.18-fips-boot-installed
< 0
- chainguard•linux-azure-6.18-headers
< 0
- chainguard•linux-azure-6.18-modules
< 0
- chainguard•linux-azure-generic
< 6.18.5-r0 | < 0
- chainguard•linux-azure-generic-boot-installed
< 0
- chainguard•linux-azure-generic-fips-boot-installed
< 0
- chainguard•linux-azure-generic-headers
< 0
- chainguard•linux-azure-generic-modules
< 0
- chainguard•linux-desktop-6.18
all
- chainguard•linux-desktop-6.18-bootc
all
- chainguard•linux-desktop-6.18-bootc-boot-installed
all
- chainguard•linux-desktop-6.18-headers
all
- chainguard•linux-desktop-6.18-modules
all
- chainguard•linux-desktop-7.2
all
- chainguard•linux-desktop-7.2-bootc
all
- chainguard•linux-desktop-7.2-headers
all
- chainguard•linux-desktop-7.2-modules
all
- chainguard•linux-firecracker-6.18
all
- chainguard•linux-gcp-6.12
< 6.12.65-r0 | < 0
- chainguard•linux-gcp-6.18
< 6.18.10-r0 | < 0
- chainguard•linux-gcp-6.18-boot-installed
< 0
- chainguard•linux-gcp-6.18-fips-boot-installed
< 0
- chainguard•linux-gcp-6.18-headers
< 0
- chainguard•linux-gcp-6.18-modules
< 0
- chainguard•linux-gcp-generic
< 0 | < 6.18.5-r0
- chainguard•linux-gcp-generic-boot-installed
< 0
- chainguard•linux-gcp-generic-fips-boot-installed
< 0
- chainguard•linux-gcp-generic-headers
< 0
- chainguard•linux-gcp-generic-modules
< 0
- chainguard•linux-qemu-6.12
< 6.12.71-r0
Showing first 50 affected entries in server-rendered view.
References (23)
- https://access.redhat.com/errata/RHSA-2024:2394
- https://access.redhat.com/errata/RHSA-2024:2950
- https://access.redhat.com/errata/RHSA-2024:3138
- https://access.redhat.com/security/cve/CVE-2023-6176
- https://bugzilla.redhat.com/show_bug.cgi?id=2219359
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cfaa80c91f6f99b9342b6557f0f0e1143e434066
- http://packetstormsecurity.com/files/177029/Kernel-Live-Patch-Security-Notice-LSN-0100-1.html
- https://ubuntu.com/security/CVE-2023-6176
- https://git.kernel.org/linus/cfaa80c91f6f99b9342b6557f0f0e1143e434066
- https://ubuntu.com/security/notices/USN-6548-1
- https://ubuntu.com/security/notices/USN-6548-2
- https://ubuntu.com/security/notices/USN-6548-3
- https://ubuntu.com/security/notices/USN-6548-4
- https://ubuntu.com/security/notices/USN-6548-5
- https://ubuntu.com/security/notices/USN-6624-1
- https://ubuntu.com/security/notices/USN-6626-1
- https://ubuntu.com/security/notices/USN-6628-1
- https://ubuntu.com/security/notices/USN-6626-2
- https://ubuntu.com/security/notices/USN-6628-2
- https://ubuntu.com/security/notices/USN-6626-3
- https://ubuntu.com/security/notices/USN-6652-1
- https://www.cve.org/CVERecord?id=CVE-2023-6176
- https://security-tracker.debian.org/tracker/CVE-2023-6176