PT-2024-14774 · Linux+5 · Linux Kernel+5
Xiao Liang
·
Published
2024-05-10
·
Updated
2025-09-29
·
CVE-2023-52889
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.50
Description
The vulnerability is related to a null pointer dereference in the apparmor component of the Linux kernel. This occurs when receiving ICMP packets with secmark set while an ICMP raw socket is being created. The
SK CTX(sk)->label is updated in apparmor socket post create(), but the packet is delivered to the socket before that, causing the null pointer dereference. To mitigate this, the packet should be dropped if the label context is not set.Recommendations
For Linux kernel versions prior to 6.6.50, update to version 6.6.50 or later to resolve the vulnerability. If updating is not possible, consider disabling the apparmor component or restricting its use as a temporary workaround until a patch is available.
Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu