PT-2023-9712 · Linux+3 · Linux Kernel+3

Published 2023-11-17 · Updated 2025-02-03 · CVE-2023-52783

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the function wx sw init() in the Linux kernel's wangxun component. When a device uses a custom subsystem vendor ID, the function returns before the memory of wx->mac table is allocated, causing a null pointer that leads to a kernel panic. This can be exploited to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2024-10224

CVE-2023-52783

SUSE-SU-2024:2571-1

SUSE-SU-2024:2896-1

SUSE-SU-2024:2973-1

SUSE-SU-2025:20008-1

SUSE-SU-2025:20028-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 1925

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52783.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-52783 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-52783 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-10224 · Security Note
• https://git.kernel.org/stable/c/8ba2c459668cfe2aaacc5ebcd35b4b9ef8643013 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:20028-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2571-1 · Vendor Advisory
• https://git.kernel.org/stable/c/61a55071653974dab172d4c5d699bb365cfd13c9 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:20008-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-52783 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-52783 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-52783 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-52783 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52783 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2896-1 · Vendor Advisory