CVE-2023-52735

bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself

Critical · published May 21, 2024

CVSS v3.1
9.1
EPSS
1%
Percentile
68.4
In the wild
Unconfirmed
What it is

🔥 Who needs a rollercoaster when you've got recursive loops in the Linux kernel? This vulnerability allows sock_map callbacks to call themselves, leading to a potential stack overflow! Think of it like a restaurant where the chef keeps asking the waiter to take orders, but the waiter just keeps sending those same orders back to the chef. Chaos ensues, and before you know it, the kitchen is in a tangled mess! If this vulnerability is exploited, it could lead to a stack overflow, potentially crashing the system and causing a resource leak. This means that your server could become unresponsive, leaving you with a mountain of recovery work. Talk about a recipe for disaster!

Put simply

Think of it like a restaurant where the chef keeps asking the waiter to take orders, but the waiter just keeps sending those same orders back to the chef. Chaos ensues, and before you know it, the kitchen is in a tangled mess! This CVE addresses a flaw in the Linux kernel related to the sockmap functionality, where proto callbacks inadvertently call themselves, resulting in a recursive loop that can exhaust stack space.

What to do

If this vulnerability is exploited, it could lead to a stack overflow, potentially crashing the system and causing a resource leak. This means that your server could become unresponsive, leaving you with a mountain of recovery work. Talk about a recipe for disaster! Update your Linux kernel to the latest version where this vulnerability has been patched. Ensure your environment is secure by regularly checking for updates. Don't let this loop of doom get you! You’ve got this! Stay vigilant, patch up, and keep that system secure! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01219 · 68.4th percentile
Published
2024-05-21T15:22Z
EPSS history
Timeline
  • 21 MAY 15:22Z
    bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself
    cvelistv5