CVE-2023-52834

CVE-2023-52834

High · published May 21, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
50.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

atl1c: Work around the DMA RX overflow issue

This is based on alx driver commit 881d0327db37 ("net: alx: Work around

the DMA RX overflow issue").

The alx and atl1c drivers had RX overflow error which was why a custom

allocator was created to avoid certain addresses. The simpler workaround

then created for alx driver, but not for atl1c due to lack of tester.

Instead of using a custom allocator, check the allocated skb address and

use skb_reserve() to move away from problematic 0x...fc0 address.

Tested on AR8131 on Acer 4540.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00652 · 50.6th percentile
Published
2024-05-21T20:15Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel< 5.15.1405.15.140
linux/linux_kernel≥ 5.16, < 6.1.646.1.64
linux/linux_kernel≥ 6.2, < 6.5.136.5.13
linux/linux_kernel≥ 6.6, < 6.6.36.6.3
References (10)
EPSS history
Timeline
  • 21 MAY 15:31Z
    atl1c: Work around the DMA RX overflow issue
    cvelistv5