PT-2023-9477 · Linux+8 · Linux Kernel+8
Bernard Metzler
·
Published
2023-09-11
·
Updated
2025-09-29
·
CVE-2023-52513
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a NULL pointer dereference in the RDMA/siw component of the Linux kernel. When immediate MPA request processing fails, the newly created endpoint unlinks the listening endpoint and is ready to be dropped. However, this special case was not handled correctly by the code handling the later TCP socket close, causing a NULL dereference crash in
siw cm work handler() when dereferencing a NULL listener. The patch also simplifies MPA processing in general by suppressing scheduling of useless TCP socket reads in sk data ready() upcall if the socket is already moved out of TCP ESTABLISHED state.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse