CVE-2023-52667

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52667
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix a potential double-free in fs_any_create_groups When kcalloc() for ft->g succeeds but kvzalloc() for in fails, fs_any_create_groups() will free ft->g. However, its caller fs_any_create_table() will free ft->g again through calling mlx5e_destroy_flow_table(), which will lead to a double-free. Fix this by setting ft->g to NULL in fs_any_create_groups().

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2897c981ee63e1be5e530b1042484626a10b26d8 Patch
https://git.kernel.org/stable/c/65a4ade8a6d205979292e88beeb6a626ddbd4779 Patch
https://git.kernel.org/stable/c/72a729868592752b5a294d27453da264106983b1 Patch
https://git.kernel.org/stable/c/aef855df7e1bbd5aa4484851561211500b22707e Patch
https://git.kernel.org/stable/c/b2fa86b2aceb4bc9ada51cea90f61546d7512cbe Patch
https://git.kernel.org/stable/c/2897c981ee63e1be5e530b1042484626a10b26d8 Patch
https://git.kernel.org/stable/c/65a4ade8a6d205979292e88beeb6a626ddbd4779 Patch
https://git.kernel.org/stable/c/72a729868592752b5a294d27453da264106983b1 Patch
https://git.kernel.org/stable/c/aef855df7e1bbd5aa4484851561211500b22707e Patch
https://git.kernel.org/stable/c/b2fa86b2aceb4bc9ada51cea90f61546d7512cbe Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
History

10 Jan 2025, 17:43

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/2897c981ee63e1be5e530b1042484626a10b26d8 - () https://git.kernel.org/stable/c/2897c981ee63e1be5e530b1042484626a10b26d8 - Patch
References () https://git.kernel.org/stable/c/65a4ade8a6d205979292e88beeb6a626ddbd4779 - () https://git.kernel.org/stable/c/65a4ade8a6d205979292e88beeb6a626ddbd4779 - Patch
References () https://git.kernel.org/stable/c/72a729868592752b5a294d27453da264106983b1 - () https://git.kernel.org/stable/c/72a729868592752b5a294d27453da264106983b1 - Patch
References () https://git.kernel.org/stable/c/aef855df7e1bbd5aa4484851561211500b22707e - () https://git.kernel.org/stable/c/aef855df7e1bbd5aa4484851561211500b22707e - Patch
References () https://git.kernel.org/stable/c/b2fa86b2aceb4bc9ada51cea90f61546d7512cbe - () https://git.kernel.org/stable/c/b2fa86b2aceb4bc9ada51cea90f61546d7512cbe - Patch
CPE cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CWE CWE-415

21 Nov 2024, 08:40

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/2897c981ee63e1be5e530b1042484626a10b26d8 - () https://git.kernel.org/stable/c/2897c981ee63e1be5e530b1042484626a10b26d8 -
References () https://git.kernel.org/stable/c/65a4ade8a6d205979292e88beeb6a626ddbd4779 - () https://git.kernel.org/stable/c/65a4ade8a6d205979292e88beeb6a626ddbd4779 -
References () https://git.kernel.org/stable/c/72a729868592752b5a294d27453da264106983b1 - () https://git.kernel.org/stable/c/72a729868592752b5a294d27453da264106983b1 -
References () https://git.kernel.org/stable/c/aef855df7e1bbd5aa4484851561211500b22707e - () https://git.kernel.org/stable/c/aef855df7e1bbd5aa4484851561211500b22707e -
References () https://git.kernel.org/stable/c/b2fa86b2aceb4bc9ada51cea90f61546d7512cbe - () https://git.kernel.org/stable/c/b2fa86b2aceb4bc9ada51cea90f61546d7512cbe -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net/mlx5e: corrige una posible double free en fs_any_create_groups Cuando kcalloc() para ft->g tiene éxito pero kvzalloc() para in falla, fs_any_create_groups() liberará ft-> gramo. Sin embargo, su llamador fs_any_create_table() liberará ft->g nuevamente llamando a mlx5e_destroy_flow_table(), lo que conducirá a un double free. Solucione este problema configurando ft->g en NULL en fs_any_create_groups().

17 May 2024, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-17 14:15

Updated : 2025-01-10 17:43

NVD link : CVE-2023-52667

Mitre link : CVE-2023-52667

CVE.ORG link : CVE-2023-52667

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-415

Double Free