CVE-2023-28327

A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unix_diag_get_exact in the Linux Kernel. The newly allocated skb does not have sk, leading to a NULL pointer. This flaw allows a local user to crash or potentially cause a denial of service.

• CWE-476
• CWE-476

• https://bugzilla.redhat.com/show_bug.cgi?id=2177382Issue Tracking, Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=2177382Issue Tracking, Patch

Published

Apr 19, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-28321An improper certificate validation vulnerability exists in c…5.9
• CVE-2023-28322An information disclosure vulnerability exists in curl <v8.1…3.7
• CVE-2023-28323A deserialization of untrusted data exists in EPM 2022 Su3 a…9.8
• CVE-2023-28324A improper input validation vulnerability exists in Ivanti E…9.8
• CVE-2023-28325An improper authorization vulnerability exists in Rocket.Cha…6.5
• CVE-2023-28326Vendor: The Apache Software Foundation Versions Affected: A…9.8
• CVE-2023-28328A NULL pointer dereference flaw was found in the az6027 driv…5.5
• CVE-2023-28329Insufficient validation of profile field availability condit…8.8
• CVE-2023-2833The ReviewX plugin for WordPress is vulnerable to privilege …8.8
• CVE-2023-28330Insufficient sanitizing in backup resulted in an arbitrary f…6.5
• CVE-2023-28331Content output by the database auto-linking filter required …6.1
• CVE-2023-28332If the algebra filter was enabled but not functional (eg the…6.1