CVE-2023-54265

A flaw was identified in the Linux kernel’s IPv6 networking code in the function __ip6_make_skb(). Under certain conditions—such as when using raw IPv6 sockets and processing ICMPv6 headers—the code may access an uninitialized variable because the expected header data is not guaranteed to reside in the linear portion of the socket buffer (skb). This can lead to unpredictable behavior, including potential kernel instability or crash

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.