CVE-2023-42754

Name	CVE-2023-42754
Description	A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before calling __ip_options_compile, which is not always the case if the skb is re-routed by ipvs. This issue may allow a local user with CAP_NET_ADMIN privileges to crash the system.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-3710-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
linux (PTS)	buster	4.19.249-2	vulnerable
	buster (security)	4.19.304-1	fixed
	bullseye	5.10.209-2	fixed
	bullseye (security)	5.10.205-2	fixed
	bookworm	6.1.76-1	fixed
	bookworm (security)	6.1.85-1	fixed
	trixie	6.6.15-2	fixed
	sid	6.7.12-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
linux	source	buster	4.19.304-1	DLA-3710-1
linux	source	bullseye	5.10.197-1
linux	source	bookworm	6.1.55-1
linux	source	(unstable)	6.5.6-1

https://www.openwall.com/lists/oss-security/2023/10/02/8
https://git.kernel.org/linus/0113d9c9d1ccc07f5a3710dac4aa24b6d711278c (6.6-rc3)