PT-2023-9429 · Linux+4 · Linux Kernel+4

Wei Chen

·

Published

2023-01-09

·

Updated

2025-09-29

·

CVE-2023-52906

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc8
Description The vulnerability is related to the TCA MPLS LABEL attribute in the Linux kernel, which has an invalid combination of type NLA U32 and validation type NLA VALIDATE FUNCTION. This can trigger a warning in nla get range unsigned() when validation of the attribute fails. The associated min/max fields in the policy are negative as they are aliased by the validate field. The fix involves changing the attribute type to NLA BINARY, which is consistent with the comment above struct nla policy and all other users of NLA POLICY VALIDATE FN(). As a result, the length validation is moved to the validation function.
Recommendations To resolve the issue, update the Linux kernel to a version later than 6.1.0-rc8. If updating is not possible, consider temporarily disabling the act mpls module to minimize the risk of exploitation. However, this is not a permanent solution and may have unintended consequences on the system's functionality.
Note: The provided information does not specify the exact version that contains the fix, but it is mentioned that the issue is resolved in versions later than 6.1.0-rc8.

Exploit

Fix

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2025_16880
ALT-PU-2023-8447
BDU:2024-07453
CVE-2023-52906
OESA-2024-2106
OPENSUSE-SU-2024_3190-1
OPENSUSE-SU-2024_3209-1
OPENSUSE-SU-2024_3483-1
SUSE-SU-2024:3190-1
SUSE-SU-2024:3209-1
SUSE-SU-2024:3483-1

Affected Products

Alt Linux
Astra Linux
Linux Kernel
Red Os
Suse