A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return.
CVE-2023-6915
CVSS base score
6.2 (v3.1)
Severity
MEDIUM
Attack vector
Local
Weakness
CWE-476
Last modified
November 5, 2026
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
debian debian linux
redhat codeready linux builder
redhat codeready linux builder for arm64
redhat codeready linux builder for power little endian
redhat codeready linux builder for power little endian els
redhat enterprise linux
redhat enterprise linux for els
redhat enterprise linux for ibm z systems
redhat enterprise linux for ibm z systems els
redhat enterprise linux for power little endian
References
- access.redhat.com Vendor Advisory
- access.redhat.com Vendor Advisory
- access.redhat.com Vendor Advisory
- access.redhat.com Third Party Advisory
- bugzilla.redhat.com Issue Tracking
- github.com Patch
- access.redhat.com Vendor Advisory
- access.redhat.com Vendor Advisory
- access.redhat.com Vendor Advisory
- access.redhat.com Third Party Advisory