CVE-2023-52834

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52834

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: atl1c: Work around the DMA RX overflow issue This is based on alx driver commit 881d0327db37 ("net: alx: Work around the DMA RX overflow issue"). The alx and atl1c drivers had RX overflow error which was why a custom allocator was created to avoid certain addresses. The simpler workaround then created for alx driver, but not for atl1c due to lack of tester. Instead of using a custom allocator, check the allocated skb address and use skb_reserve() to move away from problematic 0x...fc0 address. Tested on AR8131 on Acer 4540.

References
Link Resource
https://git.kernel.org/stable/c/32f08b7b430ee01ec47d730f961a3306c1c7b6fb Patch
https://git.kernel.org/stable/c/54a6152da4993ec8e4b53dc3cf577f5a2c829afa Patch
https://git.kernel.org/stable/c/57e44ff9c2c9747b2b1a53556810b0e5192655d6 Patch
https://git.kernel.org/stable/c/86565682e9053e5deb128193ea9e88531bbae9cf Patch
https://git.kernel.org/stable/c/c29a89b23f67ee592f4dee61f9d7efbf86d60315 Patch
https://git.kernel.org/stable/c/32f08b7b430ee01ec47d730f961a3306c1c7b6fb Patch
https://git.kernel.org/stable/c/54a6152da4993ec8e4b53dc3cf577f5a2c829afa Patch
https://git.kernel.org/stable/c/57e44ff9c2c9747b2b1a53556810b0e5192655d6 Patch
https://git.kernel.org/stable/c/86565682e9053e5deb128193ea9e88531bbae9cf Patch
https://git.kernel.org/stable/c/c29a89b23f67ee592f4dee61f9d7efbf86d60315 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

26 Sep 2025, 16:47

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/32f08b7b430ee01ec47d730f961a3306c1c7b6fb - () https://git.kernel.org/stable/c/32f08b7b430ee01ec47d730f961a3306c1c7b6fb - Patch
References () https://git.kernel.org/stable/c/54a6152da4993ec8e4b53dc3cf577f5a2c829afa - () https://git.kernel.org/stable/c/54a6152da4993ec8e4b53dc3cf577f5a2c829afa - Patch
References () https://git.kernel.org/stable/c/57e44ff9c2c9747b2b1a53556810b0e5192655d6 - () https://git.kernel.org/stable/c/57e44ff9c2c9747b2b1a53556810b0e5192655d6 - Patch
References () https://git.kernel.org/stable/c/86565682e9053e5deb128193ea9e88531bbae9cf - () https://git.kernel.org/stable/c/86565682e9053e5deb128193ea9e88531bbae9cf - Patch
References () https://git.kernel.org/stable/c/c29a89b23f67ee592f4dee61f9d7efbf86d60315 - () https://git.kernel.org/stable/c/c29a89b23f67ee592f4dee61f9d7efbf86d60315 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo

21 Nov 2024, 08:40

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/32f08b7b430ee01ec47d730f961a3306c1c7b6fb - () https://git.kernel.org/stable/c/32f08b7b430ee01ec47d730f961a3306c1c7b6fb -
References () https://git.kernel.org/stable/c/54a6152da4993ec8e4b53dc3cf577f5a2c829afa - () https://git.kernel.org/stable/c/54a6152da4993ec8e4b53dc3cf577f5a2c829afa -
References () https://git.kernel.org/stable/c/57e44ff9c2c9747b2b1a53556810b0e5192655d6 - () https://git.kernel.org/stable/c/57e44ff9c2c9747b2b1a53556810b0e5192655d6 -
References () https://git.kernel.org/stable/c/86565682e9053e5deb128193ea9e88531bbae9cf - () https://git.kernel.org/stable/c/86565682e9053e5deb128193ea9e88531bbae9cf -
References () https://git.kernel.org/stable/c/c29a89b23f67ee592f4dee61f9d7efbf86d60315 - () https://git.kernel.org/stable/c/c29a89b23f67ee592f4dee61f9d7efbf86d60315 -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: atl1c:workaround al problema de desbordamiento de DMA RX. Esto se basa en la confirmación del controlador alx 881d0327db37 ("net: alx: solución alternativa al problema de desbordamiento de DMA RX"). Los controladores alx y atl1c tenían un error de desbordamiento de RX, por lo que se creó un asignador personalizado para evitar ciertas direcciones. Luego se creó la solución más simple para el controlador alx, pero no para atl1c debido a la falta de un probador. En lugar de utilizar un asignador personalizado, verifique la dirección skb asignada y use skb_reserve() para alejarse de la dirección problemática 0x...fc0. Probado en AR8131 en Acer 4540.

21 May 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-21 16:15

Updated : 2025-09-26 16:47

NVD link : CVE-2023-52834

Mitre link : CVE-2023-52834

CVE.ORG link : CVE-2023-52834

JSON object : View

Products Affected

linux

CWE
NVD-CWE-noinfo