{"id":"CVE-2023-6679","title":"Kernel: null pointer dereference in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c","summary":"A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c in the Digital Phase Locked Loop (DPLL) subsystem in the  Linux kernel. This issue could be exploited to trigger a denial of s…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvssSource":"cna","cwe":["CWE-476"],"vendor":"Red Hat","product":"kernel","affected":["kernel (all versions)","kernel (all versions)","kernel (all versions)","kernel-rt (all versions)","kernel","kernel","kernel-rt","kernel","kernel-rt","kernel-rt (all versions)"],"published":"2023-12-11","updated":"2026-11-06","sourceUpdated":"2026-11-06T13:40:23.189Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2023-6679","references":[{"url":"https://access.redhat.com/errata/RHSA-2024:0439","label":"RHSA-2024:0439"},{"url":"https://access.redhat.com/errata/RHSA-2024:0448","label":"RHSA-2024:0448"},{"url":"https://access.redhat.com/errata/RHSA-2024:0461","label":"RHSA-2024:0461"},{"url":"https://access.redhat.com/security/cve/CVE-2023-6679"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253986","label":"RHBZ#2253986"},{"url":"https://lore.kernel.org/netdev/20231211083758.1082853-1-jiri@resnulli.us/"}],"tags":["cve.org"],"epss":0.00312,"epssPercentile":0.24249,"ingestedAt":"2026-11-06T13:52:17.101Z","slug":"CVE-2023-6679","body":"## Overview\n\nA null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c in the Digital Phase Locked Loop (DPLL) subsystem in the  Linux kernel. This issue could be exploited to trigger a denial of service.\n\n## Affected\n\n- `kernel (all versions)`\n- `kernel (all versions)`\n- `kernel (all versions)`\n- `kernel-rt (all versions)`\n- `kernel`\n- `kernel`\n- `kernel-rt`\n- `kernel`\n- `kernel-rt`\n- `kernel-rt (all versions)`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n### Workarounds\n\nMitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}