PT-2023-9712 · Linux+3 · Linux Kernel+3

Publicado

2023-11-17

·

Atualizado

2025-02-03

·

CVE-2023-52783

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the function wx sw init() in the Linux kernel's wangxun component. When a device uses a custom subsystem vendor ID, the function returns before the memory of wx->mac table is allocated, causing a null pointer that leads to a kernel panic. This can be exploited to cause a denial of service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2024-10224
CVE-2023-52783
SUSE-SU-2024:2571-1
SUSE-SU-2024:2896-1
SUSE-SU-2024:2973-1
SUSE-SU-2025:20008-1
SUSE-SU-2025:20028-1

Produtos afetados

Astra Linux
Linux Kernel
Red Os
Suse