CVE-2023-52735

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52735
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself sock_map proto callbacks should never call themselves by design. Protect against bugs like [1] and break out of the recursive loop to avoid a stack overflow in favor of a resource leak. [1] https://lore.kernel.org/all/00000000000073b14905ef2e7401@google.com/

9.1 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/5b4a79ba65a1ab479903fff2e604865d229b70a9 Patch
https://git.kernel.org/stable/c/7499859881488da97589f3c79cc66fa75748ad49 Patch
https://git.kernel.org/stable/c/f312367f5246e04df564d341044286e9e37a97ba Patch
https://git.kernel.org/stable/c/5b4a79ba65a1ab479903fff2e604865d229b70a9 Patch
https://git.kernel.org/stable/c/7499859881488da97589f3c79cc66fa75748ad49 Patch
https://git.kernel.org/stable/c/f312367f5246e04df564d341044286e9e37a97ba Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:*
History

02 Apr 2025, 14:51

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/5b4a79ba65a1ab479903fff2e604865d229b70a9 - () https://git.kernel.org/stable/c/5b4a79ba65a1ab479903fff2e604865d229b70a9 - Patch
References () https://git.kernel.org/stable/c/7499859881488da97589f3c79cc66fa75748ad49 - () https://git.kernel.org/stable/c/7499859881488da97589f3c79cc66fa75748ad49 - Patch
References () https://git.kernel.org/stable/c/f312367f5246e04df564d341044286e9e37a97ba - () https://git.kernel.org/stable/c/f312367f5246e04df564d341044286e9e37a97ba - Patch
First Time Linux
Linux linux Kernel

21 Nov 2024, 08:40

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/5b4a79ba65a1ab479903fff2e604865d229b70a9 - () https://git.kernel.org/stable/c/5b4a79ba65a1ab479903fff2e604865d229b70a9 -
References () https://git.kernel.org/stable/c/7499859881488da97589f3c79cc66fa75748ad49 - () https://git.kernel.org/stable/c/7499859881488da97589f3c79cc66fa75748ad49 -
References () https://git.kernel.org/stable/c/f312367f5246e04df564d341044286e9e37a97ba - () https://git.kernel.org/stable/c/f312367f5246e04df564d341044286e9e37a97ba -

03 Jul 2024, 01:43

Type Values Removed Values Added
CWE CWE-120
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.1
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: bpf, sockmap: no permita que sock_map_{close,destroy,unhash} se llame a sí mismo. Las devoluciones de llamada del proto sock_map nunca deberían llamarse a sí mismas por diseño. Protéjase contra bugs como [1] y salga del bucle recursivo para evitar un desbordamiento de la pila que favorezca una fuga de recursos. [1] https://lore.kernel.org/all/00000000000073b14905ef2e7401@google.com/

21 May 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-21 16:15

Updated : 2025-04-02 14:51

NVD link : CVE-2023-52735

Mitre link : CVE-2023-52735

CVE.ORG link : CVE-2023-52735

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')