Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-52522
HistoryMar 02, 2024 - 12:00 a.m.

CVE-2023-52522

2024-03-0200:00:00
ubuntu.com
ubuntu.com
11
cve-2023-52522
linux kernel
vulnerability
store tearing
neigh_periodic_work
rcu
lockdep support

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

In the Linux kernel, the following vulnerability has been resolved: net:
fix possible store tearing in neigh_periodic_work() While looking at a
related syzbot report involving neigh_periodic_work(), I found that I
forgot to add an annotation when deleting an RCU protected item from a
list. Readers use rcu_deference(*np), we need to use either
rcu_assign_pointer() or WRITE_ONCE() on writer side to prevent store
tearing. I use rcu_assign_pointer() to have lockdep support, this was the
choice made in neigh_flush_dev().

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%