PT-2023-9555 · Linux+6 · Linux Kernel+6

Krishna Chaitanya Chundru · Published 2023-12-14 · Updated 2026-03-14 · CVE-2023-52494

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the Linux kernel's mhi component, where an unaligned read pointer in the event ring could lead to multiple issues like Denial of Service (DoS) or ring buffer memory corruption. The kernel expects event ring elements to be 128 bits (struct mhi ring element) aligned. An unaligned read pointer poses a risk, and to mitigate this, an alignment check for the event ring read pointer has been added.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Memory Corruption

Weakness Enumeration

CWE-787

CWE-99

Related Identifiers

BDU:2024-08413

CVE-2023-52494

OESA-2024-1498

OESA-2024-1499

OESA-2024-1500

OESA-2024-1501

OPENSUSE-SU-2024_1322-1

OPENSUSE-SU-2024_1322-2

OPENSUSE-SU-2024_1332-1

OPENSUSE-SU-2024_1332-2

OPENSUSE-SU-2024_1466-1

OPENSUSE-SU-2024_1480-1

OPENSUSE-SU-2024_1490-1

SUSE-SU-2024:1466-1

SUSE-SU-2024:1480-1

SUSE-SU-2024:1490-1

USN-6765-1

USN-6766-1

USN-6766-2

USN-6766-3

USN-6795-1

USN-6818-1

USN-6818-2

USN-6818-3

USN-6818-4

USN-6819-1

USN-6819-2

USN-6819-3

USN-6819-4

USN-6828-1

Affected Products

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 875

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52494.json · Exploit
• https://git.kernel.org/stable/c/a9ebfc405fe1be145f414eafadcbf09506082010 · Patch
• https://ubuntu.com/security/CVE-2024-26751 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52670 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6766-2 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6828-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35842 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35828 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52591 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52685 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6818-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35835 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26646 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6766-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52683 · Vendor Advisory