CVE-2023-52834

Katalog CVE

CVSS 5.5 · Medium EPSS 0,65%

Kerentanan pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: atl1c: Work around the DMA RX overflow issue This is based on alx driver commit 881d0327db37 ("net: alx: Work around the DMA RX overflow issue"). The alx and atl1c drivers had RX overflow error which was why a custom allocator was created to avoid certain addresses. The simpler workaround then created for alx driver, but not for atl1c due to lack of tester. Instead of using a custom allocator, check the allocated skb address and use skb_reserve() to move away from problematic 0x...fc0 address. Tested on AR8131 on Acer 4540.

Rincian

Terbit di NVD

21 Mei 2024

Terakhir diubah

4 Agustus 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

EPSS (30 hari)

0,65% peluang dieksploitasi; lebih tinggi dari 49,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/32f08b7b430ee01ec47d730f961a3306c1c7b6fb patch
• https://git.kernel.org/stable/c/54a6152da4993ec8e4b53dc3cf577f5a2c829afa patch
• https://git.kernel.org/stable/c/57e44ff9c2c9747b2b1a53556810b0e5192655d6 patch
• https://git.kernel.org/stable/c/86565682e9053e5deb128193ea9e88531bbae9cf patch
• https://git.kernel.org/stable/c/c29a89b23f67ee592f4dee61f9d7efbf86d60315 patch