Lucene search

K
redhatcveRedhat.comRH:CVE-2023-52587
HistoryMar 06, 2024 - 10:38 p.m.

CVE-2023-52587

2024-03-0622:38:51
redhat.com
access.redhat.com
16
linux kernel
vulnerability
cve-2023-52587
mcast list locking
hard lockup
ipoib_ib_dev
rhel 4.18.0-372.75.1.el8_6
code review

AI Score

6.2

Confidence

High

EPSS

0

Percentile

13.0%

A hard lockup flaw was found in the Linux kernel’s IPoIB driver in how a user triggers the ipoib_mcast_join_task() function, caused by invalid priv->multicast_list locking. This flaw allows a local user to crash the system.

Mitigation

To mitigate this issue, prevent module ib_core from being loaded. Please see <https://access.redhat.com/solutions/41278&gt; for information on blacklisting a kernel module to prevent it from loading automatically.