Lucene search

K
osvGoogleOSV:CVE-2023-52834
HistoryMay 21, 2024 - 4:15 p.m.

CVE-2023-52834

2024-05-2116:15:00
Google
osv.dev
9
linux kernel
vulnerability
atl1c driver
alx driver
dma rx
overflow issue
custom allocator
skb_reserve
ar8131
acer 4540

AI Score

6.9

Confidence

Low

In the Linux kernel, the following vulnerability has been resolved: atl1c: Work around the DMA RX overflow issue This is based on alx driver commit 881d0327db37 (“net: alx: Work around the DMA RX overflow issue”). The alx and atl1c drivers had RX overflow error which was why a custom allocator was created to avoid certain addresses. The simpler workaround then created for alx driver, but not for atl1c due to lack of tester. Instead of using a custom allocator, check the allocated skb address and use skb_reserve() to move away from problematic 0x…fc0 address. Tested on AR8131 on Acer 4540.