CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame()
In the Linux kernel, the following vulnerability has been resolved:
hsr: Prevent use after free in prpcreatetaggedframe()
The prpfillrct() function can fail. In that situation, it frees the skb and returns NULL. Meanwhile on the success path, it returns the original skb. So it's straight forward to fix bug by using the returned value.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52846?
CVE-2023-52846 has been classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2023-52846?
To fix CVE-2023-52846, upgrade your Linux kernel to a patched version above the affected ranges.
Which versions of the Linux kernel are affected by CVE-2023-52846?
CVE-2023-52846 affects Linux kernel versions from 5.9 up to 6.6.2, excluding versions that have applied the fix.
What causes the vulnerability CVE-2023-52846?
The vulnerability is caused by a use-after-free condition in the prp_create_tagged_frame() function when handling certain skb operations.
Is CVE-2023-52846 related to any specific Linux kernel functionality?
CVE-2023-52846 is specifically related to the hsr (High-availability Seamless Redundancy) functionality within the Linux kernel.