PT-2023-9718 · Linux+8 · Linux Kernel+8
Published
2023-09-14
·
Updated
2026-03-14
·
CVE-2023-52834
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is caused by a buffer overflow in the atl1c component of the Linux kernel. This can lead to a denial of service. The problem arises from an RX overflow error in the alx and atl1c drivers, which was addressed by creating a custom allocator to avoid certain addresses. A simpler workaround was implemented for the alx driver but not for the atl1c driver due to a lack of testing. The workaround involves checking the allocated skb address and using skb reserve() to move away from problematic addresses.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Debian
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse