PT-2023-8727 · Linux+4 · Linux Kernel+4

Published 2023-09-20 · Updated 2025-09-29 · CVE-2023-52573

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:A/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a possible NULL-pointer dereference in the rds rdma cm event handler cmn() function. This could allow a remote attacker to cause a denial of service. The vulnerability is due to the lack of a check for the existence of the conn pointer before it is dereferenced as an argument to rdma set service type().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_16880

ALT-PU-2023-8487

BDU:2024-01756

CVE-2023-52573

OESA-2024-1482

OESA-2024-1485

OESA-2024-1486

OESA-2024-1487

OPENSUSE-SU-2024_2947-1

SUSE-SU-2024:2894-1

SUSE-SU-2024:2939-1

SUSE-SU-2024:2947-1

Affected Products

Alt Linux

Astra Linux

Linux Kernel

Red Os

Suse

References · 1271

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52573.json · Exploit
• https://git.kernel.org/stable/c/812da2a08dc5cc75fb71e29083ea20904510ac7a · Patch
• https://osv.dev/vulnerability/OESA-2024-1485 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52500 · Security Note
• https://ubuntu.com/security/CVE-2023-52573 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-52573 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-1031SE47 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52594 · Security Note
• https://osv.dev/vulnerability/OESA-2024-1486 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52507 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-52573 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52597 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47101 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52515 · Security Note