CVE-2023-52735

CRITICAL EPSS 64.9%
Published May 21, 20242y ago · Modified Jun 17, 20262w ago
9.1 CVSS 3.1
Critical
Find Similar
Published May 21, 2024 2y ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself sock_map proto callbacks should never call themselves by design. Protect against bugs like [1] and break out of the recursive loop to avoid a stack overflow in favor of a resource leak. [1] https://lore.kernel.org/all/00000000000073b14905ef2e7401@google.com/

CVSS Details

Base Score
9.1
Exploitability
3.9
Impact
5.2
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
64.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-120

Affected Products 8

VendorProductVersionRange
linuxlinux_kernel* <5.15.95
linuxlinux_kernel*≥5.16  –  <6.1.13
linuxlinux_kernel6.2any
linuxlinux_kernel6.2any
linuxlinux_kernel6.2any
linuxlinux_kernel6.2any
linuxlinux_kernel6.2any
linuxlinux_kernel6.2any

References 3

  • git.kernel.org https://git.kernel.org/stable/c/5b4a79ba65a1ab479903fff2e604865d229b70a9
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7499859881488da97589f3c79cc66fa75748ad49
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f312367f5246e04df564d341044286e9e37a97ba
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/5b4a79ba65a1ab479903fff2e604865d229b70a9
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7499859881488da97589f3c79cc66fa75748ad49
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f312367f5246e04df564d341044286e9e37a97ba
    Patch