CVE - CVE-2023-52834

CVE-ID
CVE-2023-52834	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: atl1c: Work around the DMA RX overflow issue This is based on alx driver commit 881d0327db37 ("net: alx: Work around the DMA RX overflow issue"). The alx and atl1c drivers had RX overflow error which was why a custom allocator was created to avoid certain addresses. The simpler workaround then created for alx driver, but not for atl1c due to lack of tester. Instead of using a custom allocator, check the allocated skb address and use skb_reserve() to move away from problematic 0x...fc0 address. Tested on AR8131 on Acer 4540.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/32f08b7b430ee01ec47d730f961a3306c1c7b6fb URL:https://git.kernel.org/stable/c/32f08b7b430ee01ec47d730f961a3306c1c7b6fb MISC:https://git.kernel.org/stable/c/54a6152da4993ec8e4b53dc3cf577f5a2c829afa URL:https://git.kernel.org/stable/c/54a6152da4993ec8e4b53dc3cf577f5a2c829afa MISC:https://git.kernel.org/stable/c/57e44ff9c2c9747b2b1a53556810b0e5192655d6 URL:https://git.kernel.org/stable/c/57e44ff9c2c9747b2b1a53556810b0e5192655d6 MISC:https://git.kernel.org/stable/c/86565682e9053e5deb128193ea9e88531bbae9cf URL:https://git.kernel.org/stable/c/86565682e9053e5deb128193ea9e88531bbae9cf MISC:https://git.kernel.org/stable/c/c29a89b23f67ee592f4dee61f9d7efbf86d60315 URL:https://git.kernel.org/stable/c/c29a89b23f67ee592f4dee61f9d7efbf86d60315
Assigning CNA
kernel.org
Date Record Created
20240521	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240521)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)