CVE - CVE-2023-52887

CVE-ID
CVE-2023-52887	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new This patch enhances error handling in scenarios with RTS (Request to Send) messages arriving closely. It replaces the less informative WARN_ON_ONCE backtraces with a new error handling method. This provides clearer error messages and allows for the early termination of problematic sessions. Previously, sessions were only released at the end of j1939_xtp_rx_rts(). Potentially this could be reproduced with something like: testj1939 -r vcan0:0x80 & while true; do # send first RTS cansend vcan0 18EC8090#1014000303002301; # send second RTS cansend vcan0 18EC8090#1014000303002301; # send abort cansend vcan0 18EC8090#ff00000000002301; done
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0bc0a7416ea73f79f915c9a05ac0858dff65cfed URL:https://git.kernel.org/stable/c/0bc0a7416ea73f79f915c9a05ac0858dff65cfed MISC:https://git.kernel.org/stable/c/1762ca80c2b72dd1b5821c5e347713ae696276ea URL:https://git.kernel.org/stable/c/1762ca80c2b72dd1b5821c5e347713ae696276ea MISC:https://git.kernel.org/stable/c/177e33b655d35d72866b50aec84307119dc5f3d4 URL:https://git.kernel.org/stable/c/177e33b655d35d72866b50aec84307119dc5f3d4 MISC:https://git.kernel.org/stable/c/26b18dd30e63d4fd777be429148e8e4ed66f60b2 URL:https://git.kernel.org/stable/c/26b18dd30e63d4fd777be429148e8e4ed66f60b2 MISC:https://git.kernel.org/stable/c/d3e2904f71ea0fe7eaff1d68a2b0363c888ea0fb URL:https://git.kernel.org/stable/c/d3e2904f71ea0fe7eaff1d68a2b0363c888ea0fb MISC:https://git.kernel.org/stable/c/ed581989d7ea9df6f8646beba2341e32cd49a1f9 URL:https://git.kernel.org/stable/c/ed581989d7ea9df6f8646beba2341e32cd49a1f9 MISC:https://git.kernel.org/stable/c/f6c839e717901dbd6b1c1ca807b6210222eb70f6 URL:https://git.kernel.org/stable/c/f6c839e717901dbd6b1c1ca807b6210222eb70f6
Assigning CNA
kernel.org
Date Record Created
20240521	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240521)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)