SECUFOCUSNOW
Home›CVE index›CVE-2023-52502
Review reviewHigh

CVE-2023-52502

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() Sili Luo reported a race in nfc_llcp_sock_get(), leading to UAF. Getting a reference on the socket found in a lookup while holding a lock should happen before releasing the lock. nfc_llcp_sock_get_sn() has a similar problem. Finally nfc_llcp_recv_snl() needs to make sure the socket found by nfc_llcp_sock_from_sn() does not disappear.

CVSS
8.8
EPSS
0.24%
15.7% percentile
CISA KEV
Not listed
Published
2024.03.03
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.24%
Technical severityCVSS 8.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() Sili Luo reported a race in nfc_llcp_sock_get(), leading to UAF. Getting a reference on the socket found in a lookup while holding a lock should happen before releasing the lock. nfc_llcp_sock_get_sn() has a similar problem. Finally nfc_llcp_recv_snl() needs to make sure the socket found by nfc_llcp_sock_from_sn() does not disappear.

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= 8f50020ed9b81ba909ce9573f9d05263cdebf502 < e863f5720a5680e50c4cecf12424d7cc31b3eb0a, >= 8f50020ed9b81ba909ce9573f9d05263cdebf502 < 7adcf014bda16cdbf804af5c164d94d5d025db2d, >= 8f50020ed9b81ba909ce9573f9d05263cdebf502 < 6ac22ecdaad2ecc662048f8c6b0ceb1ca0699ef9, >= 8f50020ed9b81ba909ce9573f9d05263cdebf502 < d888d3f70b0de32b4f51534175f039ddab15eef8, >= 8f50020ed9b81ba909ce9573f9d05263cdebf502 < e4f2611f07c87b3ddb57c4b9e8efcd1e330fc3dc, >= 8f50020ed9b81ba909ce9573f9d05263cdebf502 < d1af8a39cf839d93c8967fdd858f6bbdc3e4a15c, >= 8f50020ed9b81ba909ce9573f9d05263cdebf502 < 31c07dffafce914c1d1543c135382a11ff058d93, >= 3.6, >= 3.6 < 4.19.297, >= 4.20 < 5.4.259, >= 5.5 < 5.10.199, >= 5.11 < 5.15.136, >= 5.16 < 6.1.59, >= 6.2 < 6.5.8, 6.6
Fixed versions
4.19.297, 5.4.259, 5.10.199, 5.15.136, 6.1.59, 6.5.8

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-362, CWE-416