SECUFOCUSNOW
Home›CVE index›CVE-2023-54094
Review reviewCritical

CVE-2023-54094

Linux

In the Linux kernel, the following vulnerability has been resolved: net: prevent skb corruption on frag list segmentation Ian reported several skb corruptions triggered by rx-gro-list, collecting different oops alike: [ 62.624003] BUG: kernel NULL pointer dereference, address: 00000000000000c0 [ 62.631083] #PF: supervisor read access in kernel mode [ 62.636312] #PF: error_code(0x0000) - not-present page [ 62.641541] PGD 0 P4D 0 [ 62.644174] Oops: 0000 [#1] PREEMPT SMP NOPTI [ 62.648629] CPU: 1 PID: 913 Comm: napi/eno2-79 Not tainted 6.4.0 #364 [ 62.655162] Hardware name: Supermicro Super Se...

CVSS
9.8
EPSS
0.47%
38.6% percentile
CISA KEV
Not listed
Published
2025.12.24
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.47%
Technical severityCVSS 9.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: net: prevent skb corruption on frag list segmentation Ian reported several skb corruptions triggered by rx-gro-list, collecting different oops alike: [ 62.624003] BUG: kernel NULL pointer dereference, address: 00000000000000c0 [ 62.631083] #PF: supervisor read access in kernel mode [ 62.636312] #PF: error_code(0x0000) - not-present page [ 62.641541] PGD 0 P4D 0 [ 62.644174] Oops: 0000 [#1] PREEMPT SMP NOPTI [ 62.648629] CPU: 1 PID: 913 Comm: napi/eno2-79 Not tainted 6.4.0 #364 [ 62.655162] Hardware name: Supermicro Super Se...

Affected product and versions

Product
Linux
Affected versions
>= 3a1296a38d0cf62bffb9a03c585cbd5dbf15d596 < bc3ab5d2ab69823f5cff89cf74ef78ffa0386c9a, >= 3a1296a38d0cf62bffb9a03c585cbd5dbf15d596 < ea438eed94ac0fe69b93ac034738823c0e989a12, >= 3a1296a38d0cf62bffb9a03c585cbd5dbf15d596 < 1731234e8b60063eae858c77b55c7a88f5084353, >= 3a1296a38d0cf62bffb9a03c585cbd5dbf15d596 < 7a59f29961cf97b98b02acaadf5a0b1f8dde938c, >= 3a1296a38d0cf62bffb9a03c585cbd5dbf15d596 < c329b261afe71197d9da83c1f18eb45a7e97e089, >= 5.6
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE
Not available
CVE-2023-54094 — Linux | SECUFOCUS NOW