GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2023-52564 (GCVE-0-2023-52564)

Vulnerability from cvelistv5 – Published: 2024-03-02 21:59 – Updated: 2026-05-23 15:26
VLAI
Title
Revert "tty: n_gsm: fix UAF in gsm_cleanup_mux"
Summary
In the Linux kernel, the following vulnerability has been resolved: Revert "tty: n_gsm: fix UAF in gsm_cleanup_mux" This reverts commit 9b9c8195f3f0d74a826077fc1c01b9ee74907239. The commit above is reverted as it did not solve the original issue. gsm_cleanup_mux() tries to free up the virtual ttys by calling gsm_dlci_release() for each available DLCI. There, dlci_put() is called to decrease the reference counter for the DLCI via tty_port_put() which finally calls gsm_dlci_free(). This already clears the pointer which is being checked in gsm_cleanup_mux() before calling gsm_dlci_release(). Therefore, it is not necessary to clear this pointer in gsm_cleanup_mux() as done in the reverted commit. The commit introduces a null pointer dereference: <TASK> ? __die+0x1f/0x70 ? page_fault_oops+0x156/0x420 ? search_exception_tables+0x37/0x50 ? fixup_exception+0x21/0x310 ? exc_page_fault+0x69/0x150 ? asm_exc_page_fault+0x26/0x30 ? tty_port_put+0x19/0xa0 gsmtty_cleanup+0x29/0x80 [n_gsm] release_one_tty+0x37/0xe0 process_one_work+0x1e6/0x3e0 worker_thread+0x4c/0x3d0 ? __pfx_worker_thread+0x10/0x10 kthread+0xe1/0x110 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x2f/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1b/0x30 </TASK> The actual issue is that nothing guards dlci_put() from being called multiple times while the tty driver was triggered but did not yet finished calling gsm_dlci_free().
Severity
No CVSS data available.
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-03-07 20:09 UTC
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 8fc0eabaa73bbd9bd705577071564616da5c8c61 , < 6d5c8862932d31a810b6545f7d69ecc124402c6e (git)
Affected: 5138c228311a863c3cf937b94a3ab4c87f1f70c4 , < a48d2bcd23f2c98d575bc2f9b7a3fbd16aeea9eb (git)
Affected: 9615ca54bc138e35353a001e8b5d4824dce72188 , < c61d0b87a7028c2c10faffc524d748334c7b9827 (git)
Affected: 9b9c8195f3f0d74a826077fc1c01b9ee74907239 , < 2bff660e0ff349dee84dc4f6f6d10da4497f5b28 (git)
Affected: 9b9c8195f3f0d74a826077fc1c01b9ee74907239 , < 29346e217b8ab8a52889b88f00b268278d6b7668 (git)
Affected: 74a8d6f50cc90ed0061997db51dfa81a62b0f835 (git)
Affected: 5.10.190 , < 5.10.198 (semver)
Affected: 5.15.124 , < 5.15.134 (semver)
Affected: 6.1.43 , < 6.1.56 (semver)
Affected: 6.4.8 , < 6.5 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 6.5
Unaffected: 0 , < 6.5 (semver)
Unaffected: 5.10.198 , ≤ 5.10.* (semver)
Unaffected: 5.15.134 , ≤ 5.15.* (semver)
Unaffected: 6.1.56 , ≤ 6.1.* (semver)
Unaffected: 6.5.6 , ≤ 6.5.* (semver)
Unaffected: 6.6 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-52564",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-03-07T20:09:41.921733Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-05T17:21:06.965Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T23:03:20.987Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/6d5c8862932d31a810b6545f7d69ecc124402c6e"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/a48d2bcd23f2c98d575bc2f9b7a3fbd16aeea9eb"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/c61d0b87a7028c2c10faffc524d748334c7b9827"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/2bff660e0ff349dee84dc4f6f6d10da4497f5b28"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/29346e217b8ab8a52889b88f00b268278d6b7668"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/tty/n_gsm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "6d5c8862932d31a810b6545f7d69ecc124402c6e",
              "status": "affected",
              "version": "8fc0eabaa73bbd9bd705577071564616da5c8c61",
              "versionType": "git"
            },
            {
              "lessThan": "a48d2bcd23f2c98d575bc2f9b7a3fbd16aeea9eb",
              "status": "affected",
              "version": "5138c228311a863c3cf937b94a3ab4c87f1f70c4",
              "versionType": "git"
            },
            {
              "lessThan": "c61d0b87a7028c2c10faffc524d748334c7b9827",
              "status": "affected",
              "version": "9615ca54bc138e35353a001e8b5d4824dce72188",
              "versionType": "git"
            },
            {
              "lessThan": "2bff660e0ff349dee84dc4f6f6d10da4497f5b28",
              "status": "affected",
              "version": "9b9c8195f3f0d74a826077fc1c01b9ee74907239",
              "versionType": "git"
            },
            {
              "lessThan": "29346e217b8ab8a52889b88f00b268278d6b7668",
              "status": "affected",
              "version": "9b9c8195f3f0d74a826077fc1c01b9ee74907239",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "74a8d6f50cc90ed0061997db51dfa81a62b0f835",
              "versionType": "git"
            },
            {
              "lessThan": "5.10.198",
              "status": "affected",
              "version": "5.10.190",
              "versionType": "semver"
            },
            {
              "lessThan": "5.15.134",
              "status": "affected",
              "version": "5.15.124",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.56",
              "status": "affected",
              "version": "6.1.43",
              "versionType": "semver"
            },
            {
              "lessThan": "6.5",
              "status": "affected",
              "version": "6.4.8",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/tty/n_gsm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.5"
            },
            {
              "lessThan": "6.5",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.198",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.134",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.56",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.5.*",
              "status": "unaffected",
              "version": "6.5.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.6",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.198",
                  "versionStartIncluding": "5.10.190",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.134",
                  "versionStartIncluding": "5.15.124",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.56",
                  "versionStartIncluding": "6.1.43",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5.6",
                  "versionStartIncluding": "6.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6",
                  "versionStartIncluding": "6.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.4.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"tty: n_gsm: fix UAF in gsm_cleanup_mux\"\n\nThis reverts commit 9b9c8195f3f0d74a826077fc1c01b9ee74907239.\n\nThe commit above is reverted as it did not solve the original issue.\n\ngsm_cleanup_mux() tries to free up the virtual ttys by calling\ngsm_dlci_release() for each available DLCI. There, dlci_put() is called to\ndecrease the reference counter for the DLCI via tty_port_put() which\nfinally calls gsm_dlci_free(). This already clears the pointer which is\nbeing checked in gsm_cleanup_mux() before calling gsm_dlci_release().\nTherefore, it is not necessary to clear this pointer in gsm_cleanup_mux()\nas done in the reverted commit. The commit introduces a null pointer\ndereference:\n \u003cTASK\u003e\n ? __die+0x1f/0x70\n ? page_fault_oops+0x156/0x420\n ? search_exception_tables+0x37/0x50\n ? fixup_exception+0x21/0x310\n ? exc_page_fault+0x69/0x150\n ? asm_exc_page_fault+0x26/0x30\n ? tty_port_put+0x19/0xa0\n gsmtty_cleanup+0x29/0x80 [n_gsm]\n release_one_tty+0x37/0xe0\n process_one_work+0x1e6/0x3e0\n worker_thread+0x4c/0x3d0\n ? __pfx_worker_thread+0x10/0x10\n kthread+0xe1/0x110\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x2f/0x50\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1b/0x30\n \u003c/TASK\u003e\n\nThe actual issue is that nothing guards dlci_put() from being called\nmultiple times while the tty driver was triggered but did not yet finished\ncalling gsm_dlci_free()."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-23T15:26:08.197Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/6d5c8862932d31a810b6545f7d69ecc124402c6e"
        },
        {
          "url": "https://git.kernel.org/stable/c/a48d2bcd23f2c98d575bc2f9b7a3fbd16aeea9eb"
        },
        {
          "url": "https://git.kernel.org/stable/c/c61d0b87a7028c2c10faffc524d748334c7b9827"
        },
        {
          "url": "https://git.kernel.org/stable/c/2bff660e0ff349dee84dc4f6f6d10da4497f5b28"
        },
        {
          "url": "https://git.kernel.org/stable/c/29346e217b8ab8a52889b88f00b268278d6b7668"
        }
      ],
      "title": "Revert \"tty: n_gsm: fix UAF in gsm_cleanup_mux\"",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-52564",
    "datePublished": "2024-03-02T21:59:36.867Z",
    "dateReserved": "2024-03-02T21:55:42.567Z",
    "dateUpdated": "2026-05-23T15:26:08.197Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-52564",
      "date": "2026-09-15",
      "epss": "0.00239",
      "percentile": "0.1515"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.10.190\", \"versionEndExcluding\": \"5.10.198\", \"matchCriteriaId\": \"BB2D8159-4945-414E-BE3E-012D06CDECF4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.15.124\", \"versionEndExcluding\": \"5.15.134\", \"matchCriteriaId\": \"19F970A2-0C87-43BE-A458-32CE99A8466F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.1.43\", \"versionEndExcluding\": \"6.1.56\", \"matchCriteriaId\": \"A7A76EF2-AF5B-4071-9E4E-F62A07108496\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.5\", \"versionEndExcluding\": \"6.5.6\", \"matchCriteriaId\": \"37A7D3E0-22DF-4D92-9B5E-F8505D3471A2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.6:rc1:*:*:*:*:*:*\", \"matchCriteriaId\": \"84267A4F-DBC2-444F-B41D-69E15E1BEC97\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.6:rc2:*:*:*:*:*:*\", \"matchCriteriaId\": \"FB440208-241C-4246-9A83-C1715C0DAA6C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.6:rc3:*:*:*:*:*:*\", \"matchCriteriaId\": \"0DC421F1-3D5A-4BEF-BF76-4E468985D20B\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nRevert \\\"tty: n_gsm: fix UAF in gsm_cleanup_mux\\\"\\n\\nThis reverts commit 9b9c8195f3f0d74a826077fc1c01b9ee74907239.\\n\\nThe commit above is reverted as it did not solve the original issue.\\n\\ngsm_cleanup_mux() tries to free up the virtual ttys by calling\\ngsm_dlci_release() for each available DLCI. There, dlci_put() is called to\\ndecrease the reference counter for the DLCI via tty_port_put() which\\nfinally calls gsm_dlci_free(). This already clears the pointer which is\\nbeing checked in gsm_cleanup_mux() before calling gsm_dlci_release().\\nTherefore, it is not necessary to clear this pointer in gsm_cleanup_mux()\\nas done in the reverted commit. The commit introduces a null pointer\\ndereference:\\n \u003cTASK\u003e\\n ? __die+0x1f/0x70\\n ? page_fault_oops+0x156/0x420\\n ? search_exception_tables+0x37/0x50\\n ? fixup_exception+0x21/0x310\\n ? exc_page_fault+0x69/0x150\\n ? asm_exc_page_fault+0x26/0x30\\n ? tty_port_put+0x19/0xa0\\n gsmtty_cleanup+0x29/0x80 [n_gsm]\\n release_one_tty+0x37/0xe0\\n process_one_work+0x1e6/0x3e0\\n worker_thread+0x4c/0x3d0\\n ? __pfx_worker_thread+0x10/0x10\\n kthread+0xe1/0x110\\n ? __pfx_kthread+0x10/0x10\\n ret_from_fork+0x2f/0x50\\n ? __pfx_kthread+0x10/0x10\\n ret_from_fork_asm+0x1b/0x30\\n \u003c/TASK\u003e\\n\\nThe actual issue is that nothing guards dlci_put() from being called\\nmultiple times while the tty driver was triggered but did not yet finished\\ncalling gsm_dlci_free().\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se resolvi\\u00f3 la siguiente vulnerabilidad: Revertir \\\"tty: n_gsm: fix UAF in gsm_cleanup_mux\\\" Esto revierte el commit 9b9c8195f3f0d74a826077fc1c01b9ee74907239. el commit anterior se revierte porque no resolvi\\u00f3 el problema original. gsm_cleanup_mux() intenta liberar los ttys virtuales llamando a gsm_dlci_release() para cada DLCI disponible. All\\u00ed, se llama a dlci_put() para disminuir el contador de referencia para el DLCI a trav\\u00e9s de tty_port_put() que finalmente llama a gsm_dlci_free(). Esto ya borra el puntero que se est\\u00e1 verificando en gsm_cleanup_mux() antes de llamar a gsm_dlci_release(). Por lo tanto, no es necesario borrar este puntero en gsm_cleanup_mux() como se hizo en el commit revertida. el commit introduce una desreferencia de puntero nulo:  ? __die+0x1f/0x70 ? page_fault_oops+0x156/0x420? search_exception_tables+0x37/0x50? fixup_exception+0x21/0x310? exc_page_fault+0x69/0x150? asm_exc_page_fault+0x26/0x30? tty_port_put+0x19/0xa0 gsmtty_cleanup+0x29/0x80 [n_gsm] release_one_tty+0x37/0xe0 proceso_one_work+0x1e6/0x3e0 trabajador_thread+0x4c/0x3d0 ? __pfx_worker_thread+0x10/0x10 kthread+0xe1/0x110 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x2f/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1b/0x30  El problema real es que nada protege a dlci_put() de ser llamado varias veces mientras el controlador tty se activ\\u00f3 pero a\\u00fan no termin\\u00f3 de llamar a gsm_dlci_free().\"}]",
      "id": "CVE-2023-52564",
      "lastModified": "2025-01-07T17:34:18.947",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 5.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 3.6}]}",
      "published": "2024-03-02T22:15:48.933",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/29346e217b8ab8a52889b88f00b268278d6b7668\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/2bff660e0ff349dee84dc4f6f6d10da4497f5b28\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/6d5c8862932d31a810b6545f7d69ecc124402c6e\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/a48d2bcd23f2c98d575bc2f9b7a3fbd16aeea9eb\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/c61d0b87a7028c2c10faffc524d748334c7b9827\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/29346e217b8ab8a52889b88f00b268278d6b7668\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/2bff660e0ff349dee84dc4f6f6d10da4497f5b28\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/6d5c8862932d31a810b6545f7d69ecc124402c6e\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/a48d2bcd23f2c98d575bc2f9b7a3fbd16aeea9eb\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/c61d0b87a7028c2c10faffc524d748334c7b9827\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Analyzed",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-476\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-52564\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-03-02T22:15:48.933\",\"lastModified\":\"2026-06-17T06:43:02.187\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nRevert \\\"tty: n_gsm: fix UAF in gsm_cleanup_mux\\\"\\n\\nThis reverts commit 9b9c8195f3f0d74a826077fc1c01b9ee74907239.\\n\\nThe commit above is reverted as it did not solve the original issue.\\n\\ngsm_cleanup_mux() tries to free up the virtual ttys by calling\\ngsm_dlci_release() for each available DLCI. There, dlci_put() is called to\\ndecrease the reference counter for the DLCI via tty_port_put() which\\nfinally calls gsm_dlci_free(). This already clears the pointer which is\\nbeing checked in gsm_cleanup_mux() before calling gsm_dlci_release().\\nTherefore, it is not necessary to clear this pointer in gsm_cleanup_mux()\\nas done in the reverted commit. The commit introduces a null pointer\\ndereference:\\n \u003cTASK\u003e\\n ? __die+0x1f/0x70\\n ? page_fault_oops+0x156/0x420\\n ? search_exception_tables+0x37/0x50\\n ? fixup_exception+0x21/0x310\\n ? exc_page_fault+0x69/0x150\\n ? asm_exc_page_fault+0x26/0x30\\n ? tty_port_put+0x19/0xa0\\n gsmtty_cleanup+0x29/0x80 [n_gsm]\\n release_one_tty+0x37/0xe0\\n process_one_work+0x1e6/0x3e0\\n worker_thread+0x4c/0x3d0\\n ? __pfx_worker_thread+0x10/0x10\\n kthread+0xe1/0x110\\n ? __pfx_kthread+0x10/0x10\\n ret_from_fork+0x2f/0x50\\n ? __pfx_kthread+0x10/0x10\\n ret_from_fork_asm+0x1b/0x30\\n \u003c/TASK\u003e\\n\\nThe actual issue is that nothing guards dlci_put() from being called\\nmultiple times while the tty driver was triggered but did not yet finished\\ncalling gsm_dlci_free().\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: Revertir \\\"tty: n_gsm: fix UAF in gsm_cleanup_mux\\\" Esto revierte el commit 9b9c8195f3f0d74a826077fc1c01b9ee74907239. el commit anterior se revierte porque no resolvi\u00f3 el problema original. gsm_cleanup_mux() intenta liberar los ttys virtuales llamando a gsm_dlci_release() para cada DLCI disponible. All\u00ed, se llama a dlci_put() para disminuir el contador de referencia para el DLCI a trav\u00e9s de tty_port_put() que finalmente llama a gsm_dlci_free(). Esto ya borra el puntero que se est\u00e1 verificando en gsm_cleanup_mux() antes de llamar a gsm_dlci_release(). Por lo tanto, no es necesario borrar este puntero en gsm_cleanup_mux() como se hizo en el commit revertida. el commit introduce una desreferencia de puntero nulo:  ? __die+0x1f/0x70 ? page_fault_oops+0x156/0x420? search_exception_tables+0x37/0x50? fixup_exception+0x21/0x310? exc_page_fault+0x69/0x150? asm_exc_page_fault+0x26/0x30? tty_port_put+0x19/0xa0 gsmtty_cleanup+0x29/0x80 [n_gsm] release_one_tty+0x37/0xe0 proceso_one_work+0x1e6/0x3e0 trabajador_thread+0x4c/0x3d0 ? __pfx_worker_thread+0x10/0x10 kthread+0xe1/0x110 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x2f/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1b/0x30  El problema real es que nada protege a dlci_put() de ser llamado varias veces mientras el controlador tty se activ\u00f3 pero a\u00fan no termin\u00f3 de llamar a gsm_dlci_free().\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/tty/n_gsm.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"8fc0eabaa73bbd9bd705577071564616da5c8c61\",\"lessThan\":\"6d5c8862932d31a810b6545f7d69ecc124402c6e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5138c228311a863c3cf937b94a3ab4c87f1f70c4\",\"lessThan\":\"a48d2bcd23f2c98d575bc2f9b7a3fbd16aeea9eb\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"9615ca54bc138e35353a001e8b5d4824dce72188\",\"lessThan\":\"c61d0b87a7028c2c10faffc524d748334c7b9827\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"9b9c8195f3f0d74a826077fc1c01b9ee74907239\",\"lessThan\":\"2bff660e0ff349dee84dc4f6f6d10da4497f5b28\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"9b9c8195f3f0d74a826077fc1c01b9ee74907239\",\"lessThan\":\"29346e217b8ab8a52889b88f00b268278d6b7668\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"74a8d6f50cc90ed0061997db51dfa81a62b0f835\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5.10.190\",\"lessThan\":\"5.10.198\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.15.124\",\"lessThan\":\"5.15.134\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.1.43\",\"lessThan\":\"6.1.56\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.4.8\",\"lessThan\":\"6.5\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/tty/n_gsm.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.5\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.5\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.198\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.134\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.56\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.5.6\",\"lessThanOrEqual\":\"6.5.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-03-07T20:09:41.921733Z\",\"id\":\"CVE-2023-52564\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-476\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.10.190\",\"versionEndExcluding\":\"5.10.198\",\"matchCriteriaId\":\"BB2D8159-4945-414E-BE3E-012D06CDECF4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.15.124\",\"versionEndExcluding\":\"5.15.134\",\"matchCriteriaId\":\"19F970A2-0C87-43BE-A458-32CE99A8466F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.1.43\",\"versionEndExcluding\":\"6.1.56\",\"matchCriteriaId\":\"A7A76EF2-AF5B-4071-9E4E-F62A07108496\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.5\",\"versionEndExcluding\":\"6.5.6\",\"matchCriteriaId\":\"37A7D3E0-22DF-4D92-9B5E-F8505D3471A2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.6:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"84267A4F-DBC2-444F-B41D-69E15E1BEC97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.6:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"FB440208-241C-4246-9A83-C1715C0DAA6C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.6:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"0DC421F1-3D5A-4BEF-BF76-4E468985D20B\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/29346e217b8ab8a52889b88f00b268278d6b7668\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/2bff660e0ff349dee84dc4f6f6d10da4497f5b28\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6d5c8862932d31a810b6545f7d69ecc124402c6e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a48d2bcd23f2c98d575bc2f9b7a3fbd16aeea9eb\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c61d0b87a7028c2c10faffc524d748334c7b9827\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/29346e217b8ab8a52889b88f00b268278d6b7668\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/2bff660e0ff349dee84dc4f6f6d10da4497f5b28\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6d5c8862932d31a810b6545f7d69ecc124402c6e\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a48d2bcd23f2c98d575bc2f9b7a3fbd16aeea9eb\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c61d0b87a7028c2c10faffc524d748334c7b9827\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2025-11-21T14:06:38+00:00",
      "cve": "CVE-2023-52564",
      "id": "CVE-2023-52564",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "198",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: tty: n_gsm: use-after-free in gsm_cleanup_mux()",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-52564.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-29T02:12:20Z",
      "cve": "CVE-2023-52564",
      "id": "CVE-2023-52564",
      "initial_release_date": "2024-03-06T04:34:29Z",
      "product_status:known_affected": "260",
      "product_status:known_not_affected": "264",
      "product_status:recommended": "673",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-52564",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-52564.json",
      "version": "60"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/6d5c8862932d31a810b6545f7d69ecc124402c6e\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/a48d2bcd23f2c98d575bc2f9b7a3fbd16aeea9eb\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/c61d0b87a7028c2c10faffc524d748334c7b9827\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/2bff660e0ff349dee84dc4f6f6d10da4497f5b28\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/29346e217b8ab8a52889b88f00b268278d6b7668\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T23:03:20.987Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-52564\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-03-07T20:09:41.921733Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-07-05T15:20:37.900Z\"}}], \"cna\": {\"title\": \"Revert \\\"tty: n_gsm: fix UAF in gsm_cleanup_mux\\\"\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"8fc0eabaa73bbd9bd705577071564616da5c8c61\", \"lessThan\": \"6d5c8862932d31a810b6545f7d69ecc124402c6e\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"5138c228311a863c3cf937b94a3ab4c87f1f70c4\", \"lessThan\": \"a48d2bcd23f2c98d575bc2f9b7a3fbd16aeea9eb\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"9615ca54bc138e35353a001e8b5d4824dce72188\", \"lessThan\": \"c61d0b87a7028c2c10faffc524d748334c7b9827\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"9b9c8195f3f0d74a826077fc1c01b9ee74907239\", \"lessThan\": \"2bff660e0ff349dee84dc4f6f6d10da4497f5b28\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"9b9c8195f3f0d74a826077fc1c01b9ee74907239\", \"lessThan\": \"29346e217b8ab8a52889b88f00b268278d6b7668\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"74a8d6f50cc90ed0061997db51dfa81a62b0f835\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"5.10.190\", \"lessThan\": \"5.10.198\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"5.15.124\", \"lessThan\": \"5.15.134\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"6.1.43\", \"lessThan\": \"6.1.56\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"6.4.8\", \"lessThan\": \"6.5\", \"versionType\": \"semver\"}], \"programFiles\": [\"drivers/tty/n_gsm.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.5\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"6.5\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"5.10.198\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.134\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.56\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.5.6\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.5.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/tty/n_gsm.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/6d5c8862932d31a810b6545f7d69ecc124402c6e\"}, {\"url\": \"https://git.kernel.org/stable/c/a48d2bcd23f2c98d575bc2f9b7a3fbd16aeea9eb\"}, {\"url\": \"https://git.kernel.org/stable/c/c61d0b87a7028c2c10faffc524d748334c7b9827\"}, {\"url\": \"https://git.kernel.org/stable/c/2bff660e0ff349dee84dc4f6f6d10da4497f5b28\"}, {\"url\": \"https://git.kernel.org/stable/c/29346e217b8ab8a52889b88f00b268278d6b7668\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nRevert \\\"tty: n_gsm: fix UAF in gsm_cleanup_mux\\\"\\n\\nThis reverts commit 9b9c8195f3f0d74a826077fc1c01b9ee74907239.\\n\\nThe commit above is reverted as it did not solve the original issue.\\n\\ngsm_cleanup_mux() tries to free up the virtual ttys by calling\\ngsm_dlci_release() for each available DLCI. There, dlci_put() is called to\\ndecrease the reference counter for the DLCI via tty_port_put() which\\nfinally calls gsm_dlci_free(). This already clears the pointer which is\\nbeing checked in gsm_cleanup_mux() before calling gsm_dlci_release().\\nTherefore, it is not necessary to clear this pointer in gsm_cleanup_mux()\\nas done in the reverted commit. The commit introduces a null pointer\\ndereference:\\n \u003cTASK\u003e\\n ? __die+0x1f/0x70\\n ? page_fault_oops+0x156/0x420\\n ? search_exception_tables+0x37/0x50\\n ? fixup_exception+0x21/0x310\\n ? exc_page_fault+0x69/0x150\\n ? asm_exc_page_fault+0x26/0x30\\n ? tty_port_put+0x19/0xa0\\n gsmtty_cleanup+0x29/0x80 [n_gsm]\\n release_one_tty+0x37/0xe0\\n process_one_work+0x1e6/0x3e0\\n worker_thread+0x4c/0x3d0\\n ? __pfx_worker_thread+0x10/0x10\\n kthread+0xe1/0x110\\n ? __pfx_kthread+0x10/0x10\\n ret_from_fork+0x2f/0x50\\n ? __pfx_kthread+0x10/0x10\\n ret_from_fork_asm+0x1b/0x30\\n \u003c/TASK\u003e\\n\\nThe actual issue is that nothing guards dlci_put() from being called\\nmultiple times while the tty driver was triggered but did not yet finished\\ncalling gsm_dlci_free().\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.198\", \"versionStartIncluding\": \"5.10.190\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.134\", \"versionStartIncluding\": \"5.15.124\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.56\", \"versionStartIncluding\": \"6.1.43\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.5.6\", \"versionStartIncluding\": \"6.5\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6\", \"versionStartIncluding\": \"6.5\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"6.4.8\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-05-23T15:26:08.197Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2023-52564\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-23T15:26:08.197Z\", \"dateReserved\": \"2024-03-02T21:55:42.567Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-03-02T21:59:36.867Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.