PT-2023-8753 · Linux+7 · Linux Kernel+7

Published

2023-09-15

·

Updated

2025-09-29

·

CVE-2023-52580

CVSS v2.0

9.4

High

VectorAV:N/AC:L/Au:N/C:C/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.85-intel-ese-standard-lts
Description The vulnerability is related to the skb flow dissect function in the Linux kernel, which incorrectly calculates the nhoff value when a PTP ethernet raw frame with a size of more than 256 bytes followed by a 0xff pattern is sent. This leads to a kernel crash. The issue is caused by the hdr->message length taking the wrong value (0xffff) and not replicating the real header length. The nhoff value is overridden, and the PTP header is badly dissected.
Recommendations To resolve the issue, update the Linux kernel to a version that includes the fix for the net/core: Fix ETH P 1588 flow dissector vulnerability. Specifically, update to a version later than 5.15.85-intel-ese-standard-lts.
As a temporary workaround, consider disabling the skb flow dissect function until a patch is available. However, this may have unintended consequences and should be done with caution.
It is also recommended to restrict access to the vulnerable module net/core to minimize the risk of exploitation.
Note: The provided information does not specify the exact version that includes the fix, so it is recommended to update to the latest available version of the Linux kernel.

Exploit

Fix

Improper Resource Release

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2024:2394
ALSA-2024:2950
ALSA-2024:3138
ALSA-2024_2394
ALSA-2025_16880
BDU:2024-01805
CESA-2024_2950
CESA-2024_3138
CVE-2023-52580
INFSA-2024_2394
INFSA-2024_2950
INFSA-2024_3138
OPENSUSE-SU-2024_2947-1
RHSA-2024:2394
RHSA-2024:2950
RHSA-2024:3138
RHSA-2024_2394
RHSA-2024_2950
RHSA-2024_3138
RLSA-2024:2950
RLSA-2024:3138
SUSE-SU-2024:2894-1
SUSE-SU-2024:2939-1
SUSE-SU-2024:2947-1

Affected Products

Almalinux
Astra Linux
Centos
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse