CVE-2023-1390

A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system to instantly spike to 100%, causing a denial of service condition.

Red Hat Enterprise Linux 6 and 7 are not affected by this issue as they did not include the affected code in tipc_link_xmit, introduced in upstream kernel version 4.3 (commit af9b028 "tipc: make media xmit call outside node spinlock context").

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.