CVE-2023-52524
published 2024-03-02CVE-2023-52524: In the Linux kernel, the following vulnerability has been resolved: net: nfc: llcp: Add lock when modifying device list The device list needs its associated…
PriorityP336high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.18%
8.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
net: nfc: llcp: Add lock when modifying device list
The device list needs its associated lock held when modifying it, or the
list could become corrupted, as syzbot discovered.
Affected
28 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.64-1 (bookworm) | linux 6.1.64-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 425d9d3a92df7d96b3cfb7ee5c240293a21cbde3 < 7562780e32b84196731d57dd24563546fcf6d082 | 7562780e32b84196731d57dd24563546fcf6d082 |
| linux | linux | >= 5.10.188 < 5.10.198 | 5.10.198 |
| linux | linux | >= 5.15.121 < 5.15.135 | 5.15.135 |
| linux | linux | >= 5.4.251 < 5.4.258 | 5.4.258 |
| linux | linux | >= 6.1.39 < 6.1.57 | 6.1.57 |
| linux | linux | >= 6.3.13 < 6.4 | 6.4 |
| linux | linux | >= 6.4.4 < 6.5 | 6.5 |
| linux | linux | >= 6709d4b7bc2e079241fdef15d1160581c5261c10 < 29c16c2bf5866326d5fbc4a537b3997fcac23391 | 29c16c2bf5866326d5fbc4a537b3997fcac23391 |
| linux | linux | >= 6709d4b7bc2e079241fdef15d1160581c5261c10 < dfc7f7a988dad34c3bf4c053124fb26aa6c5f916 | dfc7f7a988dad34c3bf4c053124fb26aa6c5f916 |
| linux | linux | >= 96f2c6f272ec04083d828de46285a7d7b17d1aad < dba849cc98113b145c6e720122942c00b8012bdb | dba849cc98113b145c6e720122942c00b8012bdb |
| linux | linux | >= dd6ff3f3862709ab1a12566e73b9d6a9b8f6e548 < 191d87a19cf1005ecf41e1ae08d74e17379e8391 | 191d87a19cf1005ecf41e1ae08d74e17379e8391 |
| linux | linux | >= fc8429f8d86801f092fbfbd257c3af821ac0dcd3 < 4837a192f6d06d5bb2f3f47d6ce5353ab69bf86b | 4837a192f6d06d5bb2f3f47d6ce5353ab69bf86b |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.205-1 | 5.10.205-1 |
| linux | linux_kernel | >= 0 < 6.1.64-1 | 6.1.64-1 |
| linux | linux_kernel | >= 0 < 6.5.8-1 | 6.5.8-1 |
| linux | linux_kernel | >= 0 < 6.5.8-1 | 6.5.8-1 |
| linux | linux_kernel | >= 0 < 4.4.0-254.288 | 4.4.0-254.288 |
| linux | linux_kernel | >= 0 < 4.15.0-225.237 | 4.15.0-225.237 |
| linux | linux_kernel | >= 5.10.188 < 5.10.198 | 5.10.198 |
| linux | linux_kernel | >= 5.15.121 < 5.15.135 | 5.15.135 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
vendor_ubuntu5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
linux-aws-hwe vulnerabilities
osv·2024-05-23·CVSS 5.5
CVE-2023-47233 [MEDIUM] linux-aws-hwe vulnerabilities
linux-aws-hwe vulnerabilities
Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux
kernel contained a race condition during device removal, leading to a use-
after-free vulnerability. A physically proximate attacker could possibly
use this to cause a denial of service (system crash). (CVE-2023-47233)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Block layer subsystem;
- Userspace I/O drivers;
- Ceph distributed file system;
- Ext4 file system;
- JFS file system;
- NILFS2 file system;
- Bluetooth subsystem;
- Networking core;
- IPv4 networking;
- IPv6 networking;
- Logical Link layer;
- MAC80211 subsystem;
- Netlink;
- NFC subsystem;
-
OSV
linux-gcp vulnerabilities
osv·2024-05-21·CVSS 5.5
CVE-2023-47233 [MEDIUM] linux-gcp vulnerabilities
linux-gcp vulnerabilities
Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux
kernel contained a race condition during device removal, leading to a use-
after-free vulnerability. A physically proximate attacker could possibly
use this to cause a denial of service (system crash). (CVE-2023-47233)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Block layer subsystem;
- Userspace I/O drivers;
- Ceph distributed file system;
- Ext4 file system;
- JFS file system;
- NILFS2 file system;
- Bluetooth subsystem;
- Networking core;
- IPv4 networking;
- IPv6 networking;
- Logical Link layer;
- MAC80211 subsystem;
- Netlink;
- NFC subsystem;
- Tom
OSV
linux-azure vulnerabilities
osv·2024-05-20·CVSS 5.5
CVE-2023-47233 [MEDIUM] linux-azure vulnerabilities
linux-azure vulnerabilities
Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux
kernel contained a race condition during device removal, leading to a use-
after-free vulnerability. A physically proximate attacker could possibly
use this to cause a denial of service (system crash). (CVE-2023-47233)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Block layer subsystem;
- Userspace I/O drivers;
- Ceph distributed file system;
- Ext4 file system;
- JFS file system;
- NILFS2 file system;
- Bluetooth subsystem;
- Networking core;
- IPv4 networking;
- IPv6 networking;
- Logical Link layer;
- MAC80211 subsystem;
- Netlink;
- NFC subsystem;
- T
OSV
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
osv·2024-05-16·CVSS 5.5
CVE-2023-47233 [MEDIUM] linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux
kernel contained a race condition during device removal, leading to a use-
after-free vulnerability. A physically proximate attacker could possibly
use this to cause a denial of service (system crash). (CVE-2023-47233)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Ext4 file system;
- JFS file system;
- NILFS2 file system;
- Core kernel;
- Bluetooth subsystem;
- Networking core;
- IPv4 networking;
- Logical Link layer;
- MAC80211 subsystem;
- Netlink;
- NFC subsystem;
- Tomoyo security module;
(CVE-2023-52601, CVE-2024-266
OSV
linux, linux-aws, linux-azure-4.15, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities
osv·2024-05-16·CVSS 5.5
CVE-2023-47233 [MEDIUM] linux, linux-aws, linux-azure-4.15, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities
linux, linux-aws, linux-azure-4.15, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities
Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux
kernel contained a race condition during device removal, leading to a use-
after-free vulnerability. A physically proximate attacker could possibly
use this to cause a denial of service (system crash). (CVE-2023-47233)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Block layer subsystem;
- Userspace I/O drivers;
- Ceph distributed file system;
- Ext4 file system;
- JFS file system;
- NILFS2 file system;
- Bluetooth subsystem;
- Networking core;
- IPv4 networking;
- IPv6 networking;
GHSA
GHSA-x9q8-72p3-mmvx: In the Linux kernel, the following vulnerability has been resolved:
net: nfc: llcp: Add lock when modifying device list
The device list needs its as
ghsa_unreviewed·2024-03-03
CVE-2023-52524 [HIGH] CWE-667 GHSA-x9q8-72p3-mmvx: In the Linux kernel, the following vulnerability has been resolved:
net: nfc: llcp: Add lock when modifying device list
The device list needs its as
In the Linux kernel, the following vulnerability has been resolved:
net: nfc: llcp: Add lock when modifying device list
The device list needs its associated lock held when modifying it, or the
list could become corrupted, as syzbot discovered.
OSV
CVE-2023-52524: In the Linux kernel, the following vulnerability has been resolved: net: nfc: llcp: Add lock when modifying device list The device list needs its asso
osv·2024-03-02·CVSS 7.8
CVE-2023-52524 [HIGH] CVE-2023-52524: In the Linux kernel, the following vulnerability has been resolved: net: nfc: llcp: Add lock when modifying device list The device list needs its asso
In the Linux kernel, the following vulnerability has been resolved: net: nfc: llcp: Add lock when modifying device list The device list needs its associated lock held when modifying it, or the list could become corrupted, as syzbot discovered.
Ubuntu
Linux kernel (HWE) vulnerabilities
vendor_ubuntu·2024-05-23·CVSS 5.5
CVE-2024-26635 [MEDIUM] Linux kernel (HWE) vulnerabilities
Title: Linux kernel (HWE) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux
kernel contained a race condition during device removal, leading to a use-
after-free vulnerability. A physically proximate attacker could possibly
use this to cause a denial of service (system crash). (CVE-2023-47233)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Block layer subsystem;
- Userspace I/O drivers;
- Ceph distributed file system;
- Ext4 file system;
- JFS file system;
- NILFS2 file system;
- Bluetooth subsystem;
- Networking core;
- IPv4 networking;
- IPv6 network
Ubuntu
Linux kernel (GCP) vulnerabilities
vendor_ubuntu·2024-05-21·CVSS 5.5
CVE-2024-26614 [MEDIUM] Linux kernel (GCP) vulnerabilities
Title: Linux kernel (GCP) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux
kernel contained a race condition during device removal, leading to a use-
after-free vulnerability. A physically proximate attacker could possibly
use this to cause a denial of service (system crash). (CVE-2023-47233)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Block layer subsystem;
- Userspace I/O drivers;
- Ceph distributed file system;
- Ext4 file system;
- JFS file system;
- NILFS2 file system;
- Bluetooth subsystem;
- Networking core;
- IPv4 networking;
- IPv6 network
Ubuntu
Linux kernel (Azure) vulnerabilities
vendor_ubuntu·2024-05-20·CVSS 5.5
CVE-2023-47233 [MEDIUM] Linux kernel (Azure) vulnerabilities
Title: Linux kernel (Azure) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux
kernel contained a race condition during device removal, leading to a use-
after-free vulnerability. A physically proximate attacker could possibly
use this to cause a denial of service (system crash). (CVE-2023-47233)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Block layer subsystem;
- Userspace I/O drivers;
- Ceph distributed file system;
- Ext4 file system;
- JFS file system;
- NILFS2 file system;
- Bluetooth subsystem;
- Networking core;
- IPv4 networking;
- IPv6 netwo
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2024-05-16·CVSS 5.5
CVE-2021-46939 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux
kernel contained a race condition during device removal, leading to a use-
after-free vulnerability. A physically proximate attacker could possibly
use this to cause a denial of service (system crash). (CVE-2023-47233)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Ext4 file system;
- JFS file system;
- NILFS2 file system;
- Core kernel;
- Bluetooth subsystem;
- Networking core;
- IPv4 networking;
- Logical Link layer;
- MAC80211 subsystem;
- Netlink;
- NFC subsystem;
- Tomoyo securi
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2024-05-16·CVSS 5.5
CVE-2023-52524 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
Zheng Wang discovered that the Broadcom FullMAC WLAN driver in the Linux
kernel contained a race condition during device removal, leading to a use-
after-free vulnerability. A physically proximate attacker could possibly
use this to cause a denial of service (system crash). (CVE-2023-47233)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Block layer subsystem;
- Userspace I/O drivers;
- Ceph distributed file system;
- Ext4 file system;
- JFS file system;
- NILFS2 file system;
- Bluetooth subsystem;
- Networking core;
- IPv4 networking;
- IPv6 networking;
-
Red Hat
kernel: net: nfc: llcp: Add lock when modifying device list
vendor_redhat·2024-03-02·CVSS 7.8
CVE-2023-52524 [HIGH] CWE-414 kernel: net: nfc: llcp: Add lock when modifying device list
kernel: net: nfc: llcp: Add lock when modifying device list
In the Linux kernel, the following vulnerability has been resolved:
net: nfc: llcp: Add lock when modifying device list
The device list needs its associated lock held when modifying it, or the
list could become corrupted, as syzbot discovered.
A flaw was found in the net:nfc:llcp component in the Linux kernel that could allow for potential data corruption when the device list is accessed and modified, as there are no locks present to avoid concurrent modifications.
Statement: Red Hat Enterprise Linux 8 and 9 are not affected by this vulnerability.
Mitigation: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployme
Debian
CVE-2023-52524: linux - In the Linux kernel, the following vulnerability has been resolved: net: nfc: l...
vendor_debian·2023·CVSS 7.8
CVE-2023-52524 [HIGH] CVE-2023-52524: linux - In the Linux kernel, the following vulnerability has been resolved: net: nfc: l...
In the Linux kernel, the following vulnerability has been resolved: net: nfc: llcp: Add lock when modifying device list The device list needs its associated lock held when modifying it, or the list could become corrupted, as syzbot discovered.
Scope: local
bookworm: resolved (fixed in 6.1.64-1)
bullseye: resolved (fixed in 5.10.205-1)
forky: resolved (fixed in 6.5.8-1)
sid: resolved (fixed in 6.5.8-1)
trixie: resolved (fixed in 6.5.8-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/191d87a19cf1005ecf41e1ae08d74e17379e8391https://git.kernel.org/stable/c/29c16c2bf5866326d5fbc4a537b3997fcac23391https://git.kernel.org/stable/c/4837a192f6d06d5bb2f3f47d6ce5353ab69bf86bhttps://git.kernel.org/stable/c/7562780e32b84196731d57dd24563546fcf6d082https://git.kernel.org/stable/c/dba849cc98113b145c6e720122942c00b8012bdbhttps://git.kernel.org/stable/c/dfc7f7a988dad34c3bf4c053124fb26aa6c5f916https://git.kernel.org/stable/c/191d87a19cf1005ecf41e1ae08d74e17379e8391https://git.kernel.org/stable/c/29c16c2bf5866326d5fbc4a537b3997fcac23391https://git.kernel.org/stable/c/4837a192f6d06d5bb2f3f47d6ce5353ab69bf86bhttps://git.kernel.org/stable/c/7562780e32b84196731d57dd24563546fcf6d082https://git.kernel.org/stable/c/dba849cc98113b145c6e720122942c00b8012bdbhttps://git.kernel.org/stable/c/dfc7f7a988dad34c3bf4c053124fb26aa6c5f916
2024-03-02
Published