Homepage

NULL Pointer Dereference The advisory has been revoked - it doesn't affect any version of package linux-vmware-6.12  (opens in a new tab)

Threat Intelligence

EPSS
0.48% (40th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-CHAINGUARDLATEST-LINUXVMWARE612-15044014
  • published21 Jan 2026
  • disclosed25 Jul 2023
Report a new vulnerability Found a mistake?

Introduced: 25 Jul 2023

CVE-2023-3772  (opens in a new tab)
CWE-476  (opens in a new tab)

Amendment

The Chainguard security team deemed this advisory irrelevant for Chainguard:latest.

NVD Description

Note: Versions mentioned in the description apply only to the upstream linux-vmware-6.12 package and not the linux-vmware-6.12 package as distributed by Chainguard.

A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel crash and denial of service.