PT-2023-8727 · Linux+4 · Linux Kernel+4

Publicado 2023-09-20 · Atualizado 2025-09-29 · CVE-2023-52573

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:A/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a possible NULL-pointer dereference in the rds rdma cm event handler cmn() function. This could allow a remote attacker to cause a denial of service. The vulnerability is due to the lack of a check for the existence of the conn pointer before it is dereferenced as an argument to rdma set service type().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALSA-2025_16880

ALT-PU-2023-8487

BDU:2024-01756

CVE-2023-52573

OESA-2024-1482

OESA-2024-1485

OESA-2024-1486

OESA-2024-1487

OPENSUSE-SU-2024_2947-1

SUSE-SU-2024:2894-1

SUSE-SU-2024:2939-1

SUSE-SU-2024:2947-1

Produtos afetados

Alt Linux

Astra Linux

Linux Kernel

Red Os

Suse

Referências · 1271

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52573.json · Exploit
• https://bugzilla.suse.com/1226690 · Nota
• https://suse.com/security/cve/CVE-2021-47555 · Nota
• https://suse.com/security/cve/CVE-2022-48776 · Nota
• https://bugzilla.suse.com/1227797 · Nota
• https://bugzilla.suse.com/1228020 · Nota
• https://git.kernel.org/stable/c/812da2a08dc5cc75fb71e29083ea20904510ac7a · Correção
• https://suse.com/security/cve/CVE-2024-38661 · Nota
• https://suse.com/security/cve/CVE-2024-35995 · Nota
• https://bugzilla.suse.com/1226762 · Nota
• https://bugzilla.suse.com/1227435 · Nota
• https://suse.com/security/cve/CVE-2024-36914 · Nota
• https://bugzilla.suse.com/1220138 · Nota
• https://suse.com/security/cve/CVE-2021-47587 · Nota
• https://suse.com/security/cve/CVE-2021-47578 · Nota