CVE-2023-52524

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52524
In the Linux kernel, the following vulnerability has been resolved: net: nfc: llcp: Add lock when modifying device list The device list needs its associated lock held when modifying it, or the list could become corrupted, as syzbot discovered.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/191d87a19cf1005ecf41e1ae08d74e17379e8391 Patch
https://git.kernel.org/stable/c/29c16c2bf5866326d5fbc4a537b3997fcac23391 Patch
https://git.kernel.org/stable/c/4837a192f6d06d5bb2f3f47d6ce5353ab69bf86b Patch
https://git.kernel.org/stable/c/7562780e32b84196731d57dd24563546fcf6d082 Patch
https://git.kernel.org/stable/c/dba849cc98113b145c6e720122942c00b8012bdb Patch
https://git.kernel.org/stable/c/dfc7f7a988dad34c3bf4c053124fb26aa6c5f916 Patch
https://git.kernel.org/stable/c/191d87a19cf1005ecf41e1ae08d74e17379e8391 Patch
https://git.kernel.org/stable/c/29c16c2bf5866326d5fbc4a537b3997fcac23391 Patch
https://git.kernel.org/stable/c/4837a192f6d06d5bb2f3f47d6ce5353ab69bf86b Patch
https://git.kernel.org/stable/c/7562780e32b84196731d57dd24563546fcf6d082 Patch
https://git.kernel.org/stable/c/dba849cc98113b145c6e720122942c00b8012bdb Patch
https://git.kernel.org/stable/c/dfc7f7a988dad34c3bf4c053124fb26aa6c5f916 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc4:*:*:*:*:*:*
History

13 Jan 2025, 20:00

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/191d87a19cf1005ecf41e1ae08d74e17379e8391 - () https://git.kernel.org/stable/c/191d87a19cf1005ecf41e1ae08d74e17379e8391 - Patch
References () https://git.kernel.org/stable/c/29c16c2bf5866326d5fbc4a537b3997fcac23391 - () https://git.kernel.org/stable/c/29c16c2bf5866326d5fbc4a537b3997fcac23391 - Patch
References () https://git.kernel.org/stable/c/4837a192f6d06d5bb2f3f47d6ce5353ab69bf86b - () https://git.kernel.org/stable/c/4837a192f6d06d5bb2f3f47d6ce5353ab69bf86b - Patch
References () https://git.kernel.org/stable/c/7562780e32b84196731d57dd24563546fcf6d082 - () https://git.kernel.org/stable/c/7562780e32b84196731d57dd24563546fcf6d082 - Patch
References () https://git.kernel.org/stable/c/dba849cc98113b145c6e720122942c00b8012bdb - () https://git.kernel.org/stable/c/dba849cc98113b145c6e720122942c00b8012bdb - Patch
References () https://git.kernel.org/stable/c/dfc7f7a988dad34c3bf4c053124fb26aa6c5f916 - () https://git.kernel.org/stable/c/dfc7f7a988dad34c3bf4c053124fb26aa6c5f916 - Patch
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:6.6:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc1:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CWE CWE-667

21 Nov 2024, 08:39

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: nfc: llcp: Agregar bloqueo al modificar la lista de dispositivos La lista de dispositivos necesita mantener su bloqueo asociado al modificarla, o la lista podría corromperse, como descubrió syzbot.
References () https://git.kernel.org/stable/c/191d87a19cf1005ecf41e1ae08d74e17379e8391 - () https://git.kernel.org/stable/c/191d87a19cf1005ecf41e1ae08d74e17379e8391 -
References () https://git.kernel.org/stable/c/29c16c2bf5866326d5fbc4a537b3997fcac23391 - () https://git.kernel.org/stable/c/29c16c2bf5866326d5fbc4a537b3997fcac23391 -
References () https://git.kernel.org/stable/c/4837a192f6d06d5bb2f3f47d6ce5353ab69bf86b - () https://git.kernel.org/stable/c/4837a192f6d06d5bb2f3f47d6ce5353ab69bf86b -
References () https://git.kernel.org/stable/c/7562780e32b84196731d57dd24563546fcf6d082 - () https://git.kernel.org/stable/c/7562780e32b84196731d57dd24563546fcf6d082 -
References () https://git.kernel.org/stable/c/dba849cc98113b145c6e720122942c00b8012bdb - () https://git.kernel.org/stable/c/dba849cc98113b145c6e720122942c00b8012bdb -
References () https://git.kernel.org/stable/c/dfc7f7a988dad34c3bf4c053124fb26aa6c5f916 - () https://git.kernel.org/stable/c/dfc7f7a988dad34c3bf4c053124fb26aa6c5f916 -

02 Mar 2024, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-03-02 22:15

Updated : 2025-01-13 20:00

NVD link : CVE-2023-52524

Mitre link : CVE-2023-52524

CVE.ORG link : CVE-2023-52524

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-667

Improper Locking