Lucene search

K
cve416baaa9-dc9f-4396-8d5f-8c081fb06d67CVE-2023-52834
HistoryMay 21, 2024 - 4:15 p.m.

CVE-2023-52834

2024-05-2116:15:20
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
24
linux kernel
vulnerability resolved
dma rx overflow
alx driver
atl1c driver
custom allocator
skb address
skb_reserve()
ar8131
acer 4540
nvd

7.7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.1%

In the Linux kernel, the following vulnerability has been resolved:

atl1c: Work around the DMA RX overflow issue

This is based on alx driver commit 881d0327db37 (“net: alx: Work around
the DMA RX overflow issue”).

The alx and atl1c drivers had RX overflow error which was why a custom
allocator was created to avoid certain addresses. The simpler workaround
then created for alx driver, but not for atl1c due to lack of tester.

Instead of using a custom allocator, check the allocated skb address and
use skb_reserve() to move away from problematic 0x…fc0 address.

Tested on AR8131 on Acer 4540.

7.7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.1%

Related for CVE-2023-52834