Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before calling __ip_options_compile, which is not always the case if the skb is re-routed by ipvs. This issue may allow a local user with CAP_NET_ADMIN privileges to crash the system.

CVE-2023-42754 is a vulnerability identified in the IPv4 networking stack of the Linux kernel as implemented in Red Hat Enterprise Linux 8. The flaw arises from a NULL pointer dereference caused by an incorrect assumption in the kernel code that a socket buffer (skb) is always associated with a network device before the function __ip_options_compile is invoked. This assumption fails when the skb is re-routed by the IP Virtual Server (ipvs) subsystem, which can result in the skb lacking an associated device pointer. When the kernel attempts to dereference this NULL pointer, it triggers a system crash (kernel panic), leading to a denial of service condition. Exploitation requires a local attacker with CAP_NET_ADMIN privileges, which are typically granted to network administrators or privileged containers. The vulnerability does not affect confidentiality or integrity but impacts system availability. The CVSS v3.1 base score is 5.5 (medium severity), reflecting the local attack vector, low complexity, required privileges, and lack of user interaction. No public exploits have been reported to date. The issue is specific to Red Hat Enterprise Linux 8 and its kernel implementation, particularly in environments using ipvs for load balancing or routing. The flaw highlights the risks of assumptions in kernel networking code and the importance of validating pointers before dereferencing. Red Hat is expected to release patches to address this issue by ensuring skb device association is verified or handled safely before calling __ip_options_compile.

Detailed information about CVE-2023-42754: NULL Pointer Dereference in Red Hat Red Hat Enterprise Linux 8 affecting Red Hat Red Hat Enterprise Linux 8. Get real

CVE-2023-42754: NULL Pointer Dereference in Red Hat Red Hat Enterprise Linux 8 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-42754: NULL Pointer Dereference in Red Hat Red Hat Enterprise Linux 8

Threats Tagged 'cve-2023-42754'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-42754'

Lead Pen Test Professional