by Kastro
Paper/Archive/CVE-2023-52735

CVE-2023-52735

Linux Linux — bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself

EPSS 1%CVSS 9.1
critical.is priorityof 100
41
CVSS 9.1 (ADP)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 68.7.687 × 2013.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself sock_map proto callbacks should never call themselves by design. Protect against bugs like [1] and break out of the recursive loop to avoid a stack overflow in favor of a resource leak. [1] https://lore.kernel.org/all/[email protected]/

Affected

ProductAffectedFixed inSource
Linuxc5cc0d23c5414d23438c5024890e367cc5a0e645 – < f312367f5246e04df564d341044286e9e37a97baf312367f5246e04df564d341044286e9e37a97baCNA
Linuxc5d2177a72a1659554922728fc407f59950aa929 – < 7499859881488da97589f3c79cc66fa75748ad497499859881488da97589f3c79cc66fa75748ad49CNA
Linuxc5d2177a72a1659554922728fc407f59950aa929 – < 5b4a79ba65a1ab479903fff2e604865d229b70a95b4a79ba65a1ab479903fff2e604865d229b70a9CNA
Linux0580e47c8895a4d61ee095f086cba1ded7ca5e7f–CNA
Linux5.15.3 – < 5.15.955.15.95CNA
Linux5.14.19 – < 5.155.15CNA
Linux5.165.15.95CNA
linux_kernel1da177e4c3f4–CISA-ADP
linux_kernelsee advisory5.15.95CISA-ADP
linux_kernelsee advisory6.1.13CISA-ADP
linux_kernelsee advisory6.2CISA-ADP

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refgit.kernel.org/stable/c/f312367f5246e04df564d341044286e9e37a97barefgit.kernel.org/stable/c/7499859881488da97589f3c79cc66fa75748ad49refgit.kernel.org/stable/c/5b4a79ba65a1ab479903fff2e604865d229b70a9