CVE-2023-52575

CVE-2023-52575 is rejected by the CVE Numbering Authority and is not an active vulnerability entry.

CVE-2023-52573

In the Linux kernel, CVE-2023-52573 is a NULL-pointer dereference in the RDS path. Specifically, rds_rdma_cm_event_handler_cmn() now checks conn before dereferencing it as an rdma_set_service_type() argument. This fixes a possible NULL-pointer dereference. Connected advisories also reiterate the ...

CVE-2023-52571

Consolidated details indicate CVE-2023-52571 relates to the Linux kernel power: supply: rk817 driver, where a refcount leak in the probe path was fixed. The issue arose because of_node_put() was only added on some return paths, not all error paths or at driver removal time. The fix ensures of_nod...

CVE-2023-52569

CVE-2023-52569 affects the Linux kernel's btrfs code path. The patch removes a BUG() on failure to insert a delayed dir index item and adds proper error handling, but it does not fix the underlying issue of using the same index number for different items, per the provided documentation. No exploi...

CVE-2023-52568

CVE-2023-52568 affects the Linux kernel SGX path, specifically the EAUG race with page-fault handling. The vulnerability arises when the SGX EPC reclaimer (ksgxd) reclaims the SECS EPC page and sets secs.epc_page to NULL; EAUG and ELDU both use this page, but the NULL check was only applied to EL...

CVE-2023-52565

CVE-2023-52565 is a Linux kernel vulnerability affecting the media: uvcvideo subsystem. The issue is an out-of-bounds read in uvc_query_v4l2_menu() when the user-provided index exceeds the mask size, potentially allowing reading memory outside the intended bounds. The connected MiracleLinux advis...

CVE-2023-52564

CVE-2023-52564 is a Linux kernel issue related to the GSM tty driver. The advisory states that reverting the patch “tty: n_gsm: fix UAF in gsm_cleanup_mux” did not solve the original problem. The root cause described is that gsm_cleanup_mux() could call gsm_dlci_release() (via dlci_put()/tty_port...

CVE-2023-52561

CVE-2023-52561 : Linux kernel (arm64) vulnerability affecting DB845c boards with Qualcomm sdm845-db845c DTs. The issue stems from not reserving the cont splash memory region (framebuffer memory used by the bootloader), which could trigger a kernel panic (arm-smmu: Unhandled context fault) on v5.1...

CVE-2023-52559

CVE-2023-52559 concerns the Linux kernel iommu/vt-d suspension path. The issue arises because iommu_suspend() is called with IRQs disabled and memory could be allocated with GFP_KERNEL during the suspend callback, potentially re-enabling IRQs and causing intermittent suspend/hibernate problems. O...

CVE-2023-52532

CVE-2023-52532 concerns a Linux kernel TX CQE error handling issue in net: mana. The advisory states that for an unknown TX CQE error type (likely from newer hardware), the kernel must still free the SKB and update the queue tail to avoid accounting errors; TX errors can be triggered by injecting...

CVE-2023-52530

CVE-2023-52530 affects the Linux kernel’s wifi/mac80211 component. A use-after-free could occur when ieee80211_key_link() is called by ieee80211_gtk_rekey_add() and returns 0 due to KRACK protection (identical key reinstall); ieee80211_gtk_rekey_add() may still return a pointer into the key, crea...

CVE-2023-52528

CVE-2023-52528 is a Linux kernel USB networking issue in the smsC75xx driver. The bug caused an uninitialized read in __smsc75xx_read_reg during the bind/probe sequence, leading to a potential uninit-value access in the smsc75xx_wait_ready path when binding the device. The deduced root cause is u...

CVE-2023-52527

CVE-2023-52527 involves the Linux kernel IPv4/IPv6 path: the handling of transhdrlen in __ip{,6}_append_data() could inflate the length when a packet is only partially filled (e.g., after MSG_MORE), risking duplicate transport header accounting. The issue can arise when splicing into an L2TP sock...

CVE-2023-52525

CVE-2023-52525 affects the Linux kernel mwifiex wireless driver. The root cause is an out-of-bounds/overshoot check in mwifiex_process_rx_packet; the patch tightens the condition so the code path that accesses RFC1042 headers is skipped when the buffer is too small, allowing packets to be process...

CVE-2023-52523

CVE-2023-52523 – Linux kernel vulnerability (bpf, sockmap): A BPF sk_msg redirect can target a non-TCP exit socket (via SOCKMAP/SOCKHASH), which previously could downcast to a tcp_sock and crash. The issue arose after enabling redirects to non-TCP sockets, breaking assumptions that the egress soc...

CVE-2023-52517

CVE-2023-52517 affects the Linux kernel SPI sun6i driver where a race between DMA RX completion and RX FIFO drain could corrupt data. The fix separates RX FIFO drain from DMA mode by draining RX FIFO only in interrupt mode and by waiting for RX DMA completion before returning when DMA is used, en...

CVE-2023-52519

CVE-2023-52519 — Linux kernel (intel-ish-hid) : On Elkhart Lake (EHL) based systems, an Out-of-Band wake service can enable PME wake. The ISH driver must re-enable the ACPI GPE bit on resume to preserve wake capability, but BIOS clears the bit without decrementing the OS GPE reference count, caus...

CVE-2023-52515

CVE-2023-52515 affects the Linux kernel RDMA/srp path. The root cause is calling scsi_done() from srp_abort() after scmd_eh_abort_handler() runs, which could trigger a use-after-free via subsequent actions (scsi_queue_insert, scsi_finish_command, or scsi_eh_scmd_add). The fix removes the scsi_don...

CVE-2023-52513

CVE-2023-52513 affects the Linux kernel RDMA/siw component. The issue was a NULL dereference in siw_cm_work_handler() when the code path for an immediate MPA request failed, caused by mis-handling of a listening endpoint during TCP close. The patch ensures the endpoint is unlinked correctly, canc...

CVE-2023-52511

CVE-2023-52511 (Linux kernel, spi sun6i) : The issue stems from RX SPI transfers with DMA enabled where data could be corrupted during DMA to memory when transfers span more than a single byte. The fix reduces the width of each DMA read to the RX FIFO to a single byte, mitigating data loss. Publi...