PT-2023-9776 · Linux+8 · Linux Kernel+8

Marc Kleine-Budde

·

Published

2023-10-05

·

Updated

2026-03-14

·

CVE-2023-52878

CVSS v3.1

7.0

High

VectorAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to errors in reading beyond boundaries in the can put echo skb() function. If the struct can priv::echo skb is accessed out of bounds, this would cause a kernel crash. Instead, a meaningful warning message is issued and an error is returned. The exploitation of this issue may allow an attacker to cause a denial of service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2024:4211
ALSA-2024:4352
ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
BDU:2024-10522
CESA-2024_4211
CESA-2024_4352
CVE-2023-52878
INFSA-2024_4211
INFSA-2024_4352
INFSA-2024_9315
OESA-2024-1692
OESA-2024-1693
OESA-2024-1694
OPENSUSE-SU-2024_2189-1
RHSA-2024:4211
RHSA-2024:4352
RHSA-2024:9315
RHSA-2024_4211
RHSA-2024_4352
RHSA-2024_9315
RHSA-2025:4342
RLSA-2024:4211
RLSA-2024:4352
RXSA-2024:4211
SUSE-SU-2024:2008-1
SUSE-SU-2024:2011-1
SUSE-SU-2024:2019-1
SUSE-SU-2024:2189-1
SUSE-SU-2024:2190-1
SUSE-SU-2024:2571-1
SUSE-SU-2024:2896-1
SUSE-SU-2024:2973-1
SUSE-SU-2025:02846-1
SUSE-SU-2025:20008-1
SUSE-SU-2025:20028-1
SUSE-SU-2025_02846-1

Affected Products

Almalinux
Astra Linux
Centos
Debian
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse