CVE-2023-52513

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52513
In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix connection failure handling In case immediate MPA request processing fails, the newly created endpoint unlinks the listening endpoint and is ready to be dropped. This special case was not handled correctly by the code handling the later TCP socket close, causing a NULL dereference crash in siw_cm_work_handler() when dereferencing a NULL listener. We now also cancel the useless MPA timeout, if immediate MPA request processing fails. This patch furthermore simplifies MPA processing in general: Scheduling a useless TCP socket read in sk_data_ready() upcall is now surpressed, if the socket is already moved out of TCP_ESTABLISHED state.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0d520cdb0cd095eac5d00078dfd318408c9b5eed Patch
https://git.kernel.org/stable/c/53a3f777049771496f791504e7dc8ef017cba590 Patch
https://git.kernel.org/stable/c/5cf38e638e5d01b68f9133968a85e8b3fd1ecf2f Patch
https://git.kernel.org/stable/c/6e26812e289b374c17677d238164a5a8f5770594 Patch
https://git.kernel.org/stable/c/81b7bf367eea795d259d0261710c6a89f548844d Patch
https://git.kernel.org/stable/c/eeafc50a77f6a783c2c44e7ec3674a7b693e06f8 Patch
https://git.kernel.org/stable/c/0d520cdb0cd095eac5d00078dfd318408c9b5eed Patch
https://git.kernel.org/stable/c/53a3f777049771496f791504e7dc8ef017cba590 Patch
https://git.kernel.org/stable/c/5cf38e638e5d01b68f9133968a85e8b3fd1ecf2f Patch
https://git.kernel.org/stable/c/6e26812e289b374c17677d238164a5a8f5770594 Patch
https://git.kernel.org/stable/c/81b7bf367eea795d259d0261710c6a89f548844d Patch
https://git.kernel.org/stable/c/eeafc50a77f6a783c2c44e7ec3674a7b693e06f8 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc4:*:*:*:*:*:*
History

11 Dec 2024, 15:12

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:6.6:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc4:*:*:*:*:*:*
CWE CWE-476
References () https://git.kernel.org/stable/c/0d520cdb0cd095eac5d00078dfd318408c9b5eed - () https://git.kernel.org/stable/c/0d520cdb0cd095eac5d00078dfd318408c9b5eed - Patch
References () https://git.kernel.org/stable/c/53a3f777049771496f791504e7dc8ef017cba590 - () https://git.kernel.org/stable/c/53a3f777049771496f791504e7dc8ef017cba590 - Patch
References () https://git.kernel.org/stable/c/5cf38e638e5d01b68f9133968a85e8b3fd1ecf2f - () https://git.kernel.org/stable/c/5cf38e638e5d01b68f9133968a85e8b3fd1ecf2f - Patch
References () https://git.kernel.org/stable/c/6e26812e289b374c17677d238164a5a8f5770594 - () https://git.kernel.org/stable/c/6e26812e289b374c17677d238164a5a8f5770594 - Patch
References () https://git.kernel.org/stable/c/81b7bf367eea795d259d0261710c6a89f548844d - () https://git.kernel.org/stable/c/81b7bf367eea795d259d0261710c6a89f548844d - Patch
References () https://git.kernel.org/stable/c/eeafc50a77f6a783c2c44e7ec3674a7b693e06f8 - () https://git.kernel.org/stable/c/eeafc50a77f6a783c2c44e7ec3674a7b693e06f8 - Patch
First Time Linux linux Kernel
Linux

21 Nov 2024, 08:39

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0d520cdb0cd095eac5d00078dfd318408c9b5eed - () https://git.kernel.org/stable/c/0d520cdb0cd095eac5d00078dfd318408c9b5eed -
References () https://git.kernel.org/stable/c/53a3f777049771496f791504e7dc8ef017cba590 - () https://git.kernel.org/stable/c/53a3f777049771496f791504e7dc8ef017cba590 -
References () https://git.kernel.org/stable/c/5cf38e638e5d01b68f9133968a85e8b3fd1ecf2f - () https://git.kernel.org/stable/c/5cf38e638e5d01b68f9133968a85e8b3fd1ecf2f -
References () https://git.kernel.org/stable/c/6e26812e289b374c17677d238164a5a8f5770594 - () https://git.kernel.org/stable/c/6e26812e289b374c17677d238164a5a8f5770594 -
References () https://git.kernel.org/stable/c/81b7bf367eea795d259d0261710c6a89f548844d - () https://git.kernel.org/stable/c/81b7bf367eea795d259d0261710c6a89f548844d -
References () https://git.kernel.org/stable/c/eeafc50a77f6a783c2c44e7ec3674a7b693e06f8 - () https://git.kernel.org/stable/c/eeafc50a77f6a783c2c44e7ec3674a7b693e06f8 -
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: RDMA/siw: soluciona el manejo de fallas de conexión En caso de que falle el procesamiento inmediato de la solicitud MPA, el endpoint recién creado desvincula el endpoint de escucha y está listo para ser descartado. Este caso especial no fue manejado correctamente por el código que maneja el cierre posterior del socket TCP, lo que provocó un bloqueo de desreferencia NULL en siw_cm_work_handler() al desreferenciar un oyente NULL. Ahora también cancelamos el tiempo de espera inútil de MPA, si falla el procesamiento inmediato de la solicitud de MPA. Este parche además simplifica el procesamiento MPA en general: la programación de una lectura de socket TCP inútil en la llamada ascendente sk_data_ready() ahora se suprime, si el socket ya se ha movido fuera del estado TCP_ESTABLISHED.

02 Mar 2024, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-03-02 22:15

Updated : 2024-12-11 15:12

NVD link : CVE-2023-52513

Mitre link : CVE-2023-52513

CVE.ORG link : CVE-2023-52513

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference