CVE-2023-3812

CVE-2023-3812 is an out-of-bounds memory access vulnerability in the Linux kernel's TUN/TAP device driver, affecting various Linux distributions including Red Hat Enterprise Linux. A local attacker can trigger this flaw by crafting a malicious, oversized network packet when napi frags is enabled, potentially leading to a system crash or privilege escalation. With a CVSS score of 7.8 (High), this vulnerability is easily exploitable with low attack complexity and no user interaction required, allowing for high impact on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.