CVE-2023-52784
published 2024-05-21CVE-2023-52784: In the Linux kernel, the following vulnerability has been resolved: bonding: stop the device in bond_setup_by_slave() Commit 9eed321cde22 ("net: lapbether…
PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.24%
15.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
bonding: stop the device in bond_setup_by_slave()
Commit 9eed321cde22 ("net: lapbether: only support ethernet devices")
has been able to keep syzbot away from net/lapb, until today.
In the following splat [1], the issue is that a lapbether device has
been created on a bonding device without members. Then adding a non
ARPHRD_ETHER member forced the bonding master to change its type.
The fix is to make sure we call dev_close() in bond_setup_by_slave()
so that the potential linked lapbether devices (or any other devices
having assumptions on the physical device) are removed.
A similar bug has been addressed in commit 40baec225765
("bonding: fix panic on non-ARPHRD_ETHER enslave failure")
[1]
skbuff: skb_under_panic: text:ffff800089508810 len:44 put:40 head:ffff0000c78e7c00 data:ffff0000c78e7bea tail:0x16 end:0x140 dev:bond0
kernel BUG at net/core/skbuff.c:192 !
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 6007 Comm: syz-executor383 Not tainted 6.6.0-rc3-syzkaller-gbf6547d8715b #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : skb_panic net/core/skbuff.c:188 [inline]
pc : skb_under_panic+0x13c/0x140 net/core/skbuff.c:202
lr : skb_panic net/core/skbuff.c:188 [inline]
lr : skb_under_panic+0x13c/0x140 net/core/skbuff.c:202
sp : ffff800096a06aa0
x29: ffff800096a06ab0 x28: ffff800096a06ba0 x27: dfff800000000000
x26: ffff0000ce9b9b50 x25: 0000000000000016 x24: ffff0000c78e7bea
x23: ffff0000c78e7c00 x22: 000000000000002c x21: 0000000000000140
x20: 0000000000000028 x19: ffff800089508810 x18: ffff800096a06100
x17: 0000000000000000 x16: ffff80008a629a3c x15: 0000000000000001
x14: 1fffe00036837a32 x13: 0000000000000000 x12: 0000000000000000
x11: 0000000000000201 x10: 0000000000000000 x9 : cb50b496c519aa00
x8 : cb50b496c519aa00 x7 : 0000000000000001 x6
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.64-1 (bookworm) | linux 6.1.64-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 872254dd6b1f80cb95ee9e2e22980888533fc293 < b4f0e605a508f6d7cda6df2f03a0c676b778b1fe | b4f0e605a508f6d7cda6df2f03a0c676b778b1fe |
| linux | linux | >= 872254dd6b1f80cb95ee9e2e22980888533fc293 < 396baca6683f415b5bc2b380289387bef1406edc | 396baca6683f415b5bc2b380289387bef1406edc |
| linux | linux | >= 872254dd6b1f80cb95ee9e2e22980888533fc293 < 53064e8239dd2ecfefc5634e991f1025abc2ee0c | 53064e8239dd2ecfefc5634e991f1025abc2ee0c |
| linux | linux | >= 872254dd6b1f80cb95ee9e2e22980888533fc293 < 19554aa901b5833787df4417a05ccdebf351b7f4 | 19554aa901b5833787df4417a05ccdebf351b7f4 |
| linux | linux | >= 872254dd6b1f80cb95ee9e2e22980888533fc293 < 87c49806a37f88eddde3f537c162fd0c2834170c | 87c49806a37f88eddde3f537c162fd0c2834170c |
| linux | linux | >= 872254dd6b1f80cb95ee9e2e22980888533fc293 < d98c91215a5748a0f536e7ccea26027005196859 | d98c91215a5748a0f536e7ccea26027005196859 |
| linux | linux | >= 872254dd6b1f80cb95ee9e2e22980888533fc293 < 3cffa2ddc4d3fcf70cde361236f5a614f81a09b2 | 3cffa2ddc4d3fcf70cde361236f5a614f81a09b2 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.205-1 | 5.10.205-1 |
| linux | linux_kernel | >= 0 < 6.1.64-1 | 6.1.64-1 |
| linux | linux_kernel | >= 0 < 6.6.8-1 | 6.6.8-1 |
| linux | linux_kernel | >= 0 < 6.6.8-1 | 6.6.8-1 |
| linux | linux_kernel | >= 2.6.24 < 5.4.262 | 5.4.262 |
| linux | linux_kernel | >= 5.11 < 5.15.140 | 5.15.140 |
| linux | linux_kernel | >= 5.16 < 6.1.64 | 6.1.64 |
| linux | linux_kernel | >= 5.5 < 5.10.202 | 5.10.202 |
| linux | linux_kernel | >= 6.2 < 6.5.13 | 6.5.13 |
| linux | linux_kernel | >= 6.6 < 6.6.3 | 6.6.3 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Siemens SINEC OS
cisa_ics·2025-08-14
Siemens SINEC OS
ICS Advisory
##
Siemens SINEC OS
Release DateAugust 14, 2025
Alert CodeICSA-25-226-15
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v3.1 9.1
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: RUGGEDCOM, SCALANCE
- Vulnerabilities: NULL Pointer Dereference, Use After Free, Unchecked Input for Loop Condition, Out-of-bounds Write, Ou
Red Hat
kernel: bonding: stop the device in bond_setup_by_slave()
vendor_redhat·2024-05-21·CVSS 5.5
CVE-2023-52784 [MEDIUM] CWE-99 kernel: bonding: stop the device in bond_setup_by_slave()
kernel: bonding: stop the device in bond_setup_by_slave()
In the Linux kernel, the following vulnerability has been resolved:
bonding: stop the device in bond_setup_by_slave()
Commit 9eed321cde22 ("net: lapbether: only support ethernet devices")
has been able to keep syzbot away from net/lapb, until today.
In the following splat [1], the issue is that a lapbether device has
been created on a bonding device without members. Then adding a non
ARPHRD_ETHER member forced the bonding master to change its type.
The fix is to make sure we call dev_close() in bond_setup_by_slave()
so that the potential linked lapbether devices (or any other devices
having assumptions on the physical device) are removed.
A similar bug has been addressed in commit 40baec225765
("bonding: fix panic on non-ARPHRD_ETH
Debian
CVE-2023-52784: linux - In the Linux kernel, the following vulnerability has been resolved: bonding: st...
vendor_debian·2023·CVSS 5.5
CVE-2023-52784 [MEDIUM] CVE-2023-52784: linux - In the Linux kernel, the following vulnerability has been resolved: bonding: st...
In the Linux kernel, the following vulnerability has been resolved: bonding: stop the device in bond_setup_by_slave() Commit 9eed321cde22 ("net: lapbether: only support ethernet devices") has been able to keep syzbot away from net/lapb, until today. In the following splat [1], the issue is that a lapbether device has been created on a bonding device without members. Then adding a non ARPHRD_ETHER member forced the bonding master to change its type. The fix is to make sure we call dev_close() in bond_setup_by_slave() so that the potential linked lapbether devices (or any other devices having assumptions on the physical device) are removed. A similar bug has been addressed in commit 40baec225765 ("bonding: fix panic on non-ARPHRD_ETHER enslave failure") [1] skbuff: skb_under_panic: text:ffff
OSV
CVE-2023-52784: In the Linux kernel, the following vulnerability has been resolved: bonding: stop the device in bond_setup_by_slave() Commit 9eed321cde22 ("net: lapbe
osv·2024-05-21·CVSS 5.5
CVE-2023-52784 [MEDIUM] CVE-2023-52784: In the Linux kernel, the following vulnerability has been resolved: bonding: stop the device in bond_setup_by_slave() Commit 9eed321cde22 ("net: lapbe
In the Linux kernel, the following vulnerability has been resolved: bonding: stop the device in bond_setup_by_slave() Commit 9eed321cde22 ("net: lapbether: only support ethernet devices") has been able to keep syzbot away from net/lapb, until today. In the following splat [1], the issue is that a lapbether device has been created on a bonding device without members. Then adding a non ARPHRD_ETHER member forced the bonding master to change its type. The fix is to make sure we call dev_close() in bond_setup_by_slave() so that the potential linked lapbether devices (or any other devices having assumptions on the physical device) are removed. A similar bug has been addressed in commit 40baec225765 ("bonding: fix panic on non-ARPHRD_ETHER enslave failure") [1] skbuff: skb_under_panic: text:ffff
GHSA
GHSA-r5hp-gwxj-3824: In the Linux kernel, the following vulnerability has been resolved:
bonding: stop the device in bond_setup_by_slave()
Commit 9eed321cde22 ("net: lap
ghsa_unreviewed·2024-05-21
CVE-2023-52784 [MEDIUM] GHSA-r5hp-gwxj-3824: In the Linux kernel, the following vulnerability has been resolved:
bonding: stop the device in bond_setup_by_slave()
Commit 9eed321cde22 ("net: lap
In the Linux kernel, the following vulnerability has been resolved:
bonding: stop the device in bond_setup_by_slave()
Commit 9eed321cde22 ("net: lapbether: only support ethernet devices")
has been able to keep syzbot away from net/lapb, until today.
In the following splat [1], the issue is that a lapbether device has
been created on a bonding device without members. Then adding a non
ARPHRD_ETHER member forced the bonding master to change its type.
The fix is to make sure we call dev_close() in bond_setup_by_slave()
so that the potential linked lapbether devices (or any other devices
having assumptions on the physical device) are removed.
A similar bug has been addressed in commit 40baec225765
("bonding: fix panic on non-ARPHRD_ETHER enslave failure")
[1]
skbuff: skb_under_panic: tex
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/19554aa901b5833787df4417a05ccdebf351b7f4https://git.kernel.org/stable/c/396baca6683f415b5bc2b380289387bef1406edchttps://git.kernel.org/stable/c/3cffa2ddc4d3fcf70cde361236f5a614f81a09b2https://git.kernel.org/stable/c/53064e8239dd2ecfefc5634e991f1025abc2ee0chttps://git.kernel.org/stable/c/87c49806a37f88eddde3f537c162fd0c2834170chttps://git.kernel.org/stable/c/b4f0e605a508f6d7cda6df2f03a0c676b778b1fehttps://git.kernel.org/stable/c/d98c91215a5748a0f536e7ccea26027005196859https://git.kernel.org/stable/c/19554aa901b5833787df4417a05ccdebf351b7f4https://git.kernel.org/stable/c/396baca6683f415b5bc2b380289387bef1406edchttps://git.kernel.org/stable/c/3cffa2ddc4d3fcf70cde361236f5a614f81a09b2https://git.kernel.org/stable/c/53064e8239dd2ecfefc5634e991f1025abc2ee0chttps://git.kernel.org/stable/c/87c49806a37f88eddde3f537c162fd0c2834170chttps://git.kernel.org/stable/c/b4f0e605a508f6d7cda6df2f03a0c676b778b1fehttps://git.kernel.org/stable/c/d98c91215a5748a0f536e7ccea26027005196859
2024-05-21
Published