cveboard RSS feed

CVE-2023-52502

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2023
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()

In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() Sili Luo reported a race in nfc_llcp_sock_get(), leading to UAF. Getting a reference on the socket found in a lookup while holding a lock should happen before releasing the lock. nfc_llcp_sock_get_sn() has a similar problem. Finally nfc_llcp_recv_snl() needs to make sure the socket found by nfc_llcp_sock_from_sn() does not disappear.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Linux

Vendor
Linux
Product
Linux
Platforms
Unknown
Default status
unaffected
Linux · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
8f50020ed9b81ba909ce9573f9d05263cdebf502affectedgite863f5720a5680e50c4cecf12424d7cc31b3eb0aUnavailableNone listed
8f50020ed9b81ba909ce9573f9d05263cdebf502affectedgit7adcf014bda16cdbf804af5c164d94d5d025db2dUnavailableNone listed
8f50020ed9b81ba909ce9573f9d05263cdebf502affectedgit6ac22ecdaad2ecc662048f8c6b0ceb1ca0699ef9UnavailableNone listed
8f50020ed9b81ba909ce9573f9d05263cdebf502affectedgitd888d3f70b0de32b4f51534175f039ddab15eef8UnavailableNone listed
8f50020ed9b81ba909ce9573f9d05263cdebf502affectedgite4f2611f07c87b3ddb57c4b9e8efcd1e330fc3dcUnavailableNone listed
8f50020ed9b81ba909ce9573f9d05263cdebf502affectedgitd1af8a39cf839d93c8967fdd858f6bbdc3e4a15cUnavailableNone listed
8f50020ed9b81ba909ce9573f9d05263cdebf502affectedgit31c07dffafce914c1d1543c135382a11ff058d93UnavailableNone listed

Linux

Vendor
Linux
Product
Linux
Platforms
Unknown
Default status
affected
Linux · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
3.6affectedUnavailableUnavailableUnavailableNone listed
0unaffectedsemver3.6UnavailableNone listed
4.19.297unaffectedsemverUnavailable4.19.*None listed
5.4.259unaffectedsemverUnavailable5.4.*None listed
5.10.199unaffectedsemverUnavailable5.10.*None listed
5.15.136unaffectedsemverUnavailable5.15.*None listed
6.1.59unaffectedsemverUnavailable6.1.*None listed
6.5.8unaffectedsemverUnavailable6.5.*None listed
6.6unaffectedoriginal_commit_for_fixUnavailable*None listed