CVE-2023-2019

A flaw was found in the Linux kernel's netdevsim device driver within the scheduling of events. This issue results from improper management of a reference count. This flaw allows an attacker to create a denial of service condition on the system.

Red Hat Enterprise Linux 6 and 7 are not affected by this flaw as they did not ship the netdevsim device driver. Red Hat Enterprise Linux 8 is not affected as it did not include the upstream commit that introduced this flaw (0ae3eb7 "netdevsim: fib: Perform the route programming in a non-atomic context").

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.