First published: Sat Mar 02 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: net/core: Fix ETH_P_1588 flow dissector The Linux kernel CVE team has assigned <a href="https://access.redhat.com/security/cve/CVE-2023-52580">CVE-2023-52580</a> to this issue. Upstream advisory: <a href="https://lore.kernel.org/linux-cve-announce/2024030258-CVE-2023-52580-c37e@gregkh/T/#u">https://lore.kernel.org/linux-cve-announce/2024030258-CVE-2023-52580-c37e@gregkh/T/#u</a>
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/kernel | <5.15.134 | 5.15.134 |
redhat/kernel | <6.1.56 | 6.1.56 |
redhat/kernel | <6.5.6 | 6.5.6 |
redhat/kernel | <6.6 | 6.6 |
Linux Kernel | >=5.12<5.15.134 | |
Linux Kernel | >=5.16<6.1.56 | |
Linux Kernel | >=6.2<6.5.6 | |
Linux Kernel | =6.6-rc1 | |
Linux Kernel | =6.6-rc2 | |
IBM Security Verify Governance - Identity Manager | <=ISVG 10.0.2 | |
IBM Security Verify Governance, Identity Manager Software Stack | <=ISVG 10.0.2 | |
IBM Security Verify Governance, Identity Manager Virtual Appliance | <=ISVG 10.0.2 | |
IBM Security Verify Governance Identity Manager Container | <=ISVG 10.0.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-52580 is considered a medium severity vulnerability in the Linux kernel.
To fix CVE-2023-52580, you should update your kernel to version 5.15.134 or later, 6.1.56 or later, or 6.5.6 or later.
CVE-2023-52580 affects Linux kernel versions from 5.12 up to, but not including, 5.15.134, and several versions 6.1.x and 6.5.x.
CVE-2023-52580 is a flow dissector issue in the networking stack of the Linux kernel.
Yes, CVE-2023-52580 is specifically related to the Red Hat versions of the Linux kernel.