CVE-2023-52524

HIGH

7.8

Description

In the Linux kernel, the following vulnerability has been resolved: net: nfc: llcp: Add lock when modifying device list The device list needs its associated lock held when modifying it, or the list could become corrupted, as syzbot discovered.

CVE Details

CVSS v3.1 Score7.8

SeverityHIGH

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

Published3/2/2024

Last Modified1/13/2025

Sourcenvd

Honeypot Sightings0

Affected Products

linux:linux_kernel

Weaknesses (CWE)

CWE-667

References

https://git.kernel.org/stable/c/191d87a19cf1005ecf41e1ae08d74e17379e8391(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/29c16c2bf5866326d5fbc4a537b3997fcac23391(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/4837a192f6d06d5bb2f3f47d6ce5353ab69bf86b(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/7562780e32b84196731d57dd24563546fcf6d082(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/dba849cc98113b145c6e720122942c00b8012bdb(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/dfc7f7a988dad34c3bf4c053124fb26aa6c5f916(416baaa9-dc9f-4396-8d5f-8c081fb06d67)

https://git.kernel.org/stable/c/191d87a19cf1005ecf41e1ae08d74e17379e8391(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/29c16c2bf5866326d5fbc4a537b3997fcac23391(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/4837a192f6d06d5bb2f3f47d6ce5353ab69bf86b(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/7562780e32b84196731d57dd24563546fcf6d082(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/dba849cc98113b145c6e720122942c00b8012bdb(af854a3a-2127-422b-91ae-364da2661108)

https://git.kernel.org/stable/c/dfc7f7a988dad34c3bf4c053124fb26aa6c5f916(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.