CVE - CVE-2023-52502

CVE-ID
CVE-2023-52502	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() Sili Luo reported a race in nfc_llcp_sock_get(), leading to UAF. Getting a reference on the socket found in a lookup while holding a lock should happen before releasing the lock. nfc_llcp_sock_get_sn() has a similar problem. Finally nfc_llcp_recv_snl() needs to make sure the socket found by nfc_llcp_sock_from_sn() does not disappear.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/31c07dffafce914c1d1543c135382a11ff058d93 URL:https://git.kernel.org/stable/c/31c07dffafce914c1d1543c135382a11ff058d93 MISC:https://git.kernel.org/stable/c/6ac22ecdaad2ecc662048f8c6b0ceb1ca0699ef9 URL:https://git.kernel.org/stable/c/6ac22ecdaad2ecc662048f8c6b0ceb1ca0699ef9 MISC:https://git.kernel.org/stable/c/7adcf014bda16cdbf804af5c164d94d5d025db2d URL:https://git.kernel.org/stable/c/7adcf014bda16cdbf804af5c164d94d5d025db2d MISC:https://git.kernel.org/stable/c/d1af8a39cf839d93c8967fdd858f6bbdc3e4a15c URL:https://git.kernel.org/stable/c/d1af8a39cf839d93c8967fdd858f6bbdc3e4a15c MISC:https://git.kernel.org/stable/c/d888d3f70b0de32b4f51534175f039ddab15eef8 URL:https://git.kernel.org/stable/c/d888d3f70b0de32b4f51534175f039ddab15eef8 MISC:https://git.kernel.org/stable/c/e4f2611f07c87b3ddb57c4b9e8efcd1e330fc3dc URL:https://git.kernel.org/stable/c/e4f2611f07c87b3ddb57c4b9e8efcd1e330fc3dc MISC:https://git.kernel.org/stable/c/e863f5720a5680e50c4cecf12424d7cc31b3eb0a URL:https://git.kernel.org/stable/c/e863f5720a5680e50c4cecf12424d7cc31b3eb0a
Assigning CNA
kernel.org
Date Record Created
20240220	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240220)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)