CVE-2023-52513

Severity CVSS v4.0:
Pending analysis
Type:
CWE-476 NULL Pointer Dereference
Publication date:
02/03/2024
Last modified:
11/12/2024

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> RDMA/siw: Fix connection failure handling<br /> <br /> In case immediate MPA request processing fails, the newly<br /> created endpoint unlinks the listening endpoint and is<br /> ready to be dropped. This special case was not handled<br /> correctly by the code handling the later TCP socket close,<br /> causing a NULL dereference crash in siw_cm_work_handler()<br /> when dereferencing a NULL listener. We now also cancel<br /> the useless MPA timeout, if immediate MPA request<br /> processing fails.<br /> <br /> This patch furthermore simplifies MPA processing in general:<br /> Scheduling a useless TCP socket read in sk_data_ready() upcall<br /> is now surpressed, if the socket is already moved out of<br /> TCP_ESTABLISHED state.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.3 (including) 5.4.258 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.5 (including) 5.10.198 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11 (including) 5.15.135 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 6.1.57 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.2 (including) 6.5.7 (excluding)
cpe:2.3:o:linux:linux_kernel:6.6:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc4:*:*:*:*:*:*