CVE-2023-2166 (published 2023-04-19T00:00:00)
A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in the receive path of CAN frames. A local user could use this flaw to crash the system or potentially cause a denial of service.
Affected products: Vendor: n/a
Product: Linux
Versions: Linux Kernel version prior to Kernel 6.1 RC9