Executive Summary

Informations
Name CVE-2023-52983 First vendor Publication 2025-03-27
Vendor Cve Last vendor Modification 2025-03-28

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

In the Linux kernel, the following vulnerability has been resolved:

block, bfq: fix uaf for bfqq in bic_set_bfqq()

After commit 64dc8c732f5c ("block, bfq: fix possible uaf for 'bfqq->bic'"), bic->bfqq will be accessed in bic_set_bfqq(), however, in some context bic->bfqq will be freed, and bic_set_bfqq() is called with the freed bic->bfqq.

Fix the problem by always freeing bfqq after bic_set_bfqq().

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-52983

Sources (Detail)

https://git.kernel.org/stable/c/511c922c5bf6c8a166bea826e702336bc2424140
https://git.kernel.org/stable/c/7f77f3dab5066a7c9da73d72d1eee895ff84a8d5
https://git.kernel.org/stable/c/b600de2d7d3a16f9007fad1bdae82a3951a26af2
https://git.kernel.org/stable/c/cb1876fc33af26d00efdd473311f1b664c77c44e
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
Date Informations
2025-03-31 13:20:37
  • Multiple Updates
2025-03-27 21:20:35
  • First insertion