PT-2024-14675 · Linux+8 · Linux Kernel+8

Published 2023-07-21 · Updated 2026-03-14 · CVE-2023-52638

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A deadlock situation in the Linux kernel has been resolved by changing j1939 socks lock to an rwlock. The deadlock occurred due to a circular lock dependency between j1939 socks lock, active session list lock, and sk session queue lock. This fix prepares for further patches to resolve a reference counting problem within the j1939 codebase.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

ALSA-2024:4583

ALSA-2025_16880

BDU:2025-14290

CVE-2023-52638

DSA-5658-1

INFSA-2024_4583

OESA-2024-1617

OESA-2024-1618

RHSA-2024:4533

RHSA-2024:4554

RHSA-2024:4583

RHSA-2024_4583

RHSA-2026:0537

RHSA-2026:0576

RLSA-2024:4583

USN-6766-1

USN-6766-2

USN-6766-3

USN-6795-1

USN-6828-1

USN-6895-1

USN-6895-2

USN-6895-3

USN-6895-4

USN-6900-1

Affected Products

Almalinux

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Hat

Red Os

Rocky Linux

Ubuntu

References · 462

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52638.json · Exploit
• https://ubuntu.com/security/CVE-2024-27034 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26694 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52595 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1618 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26787 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52604 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26693 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27390 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26875 · Security Note
• https://ubuntu.com/security/CVE-2024-26622 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26735 · Security Note
• https://ubuntu.com/security/CVE-2024-26830 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26660 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6900-1 · Vendor Advisory