CVE-2023-52768

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52768
In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: use vmm_table as array in wilc struct Enabling KASAN and running some iperf tests raises some memory issues with vmm_table: BUG: KASAN: slab-out-of-bounds in wilc_wlan_handle_txq+0x6ac/0xdb4 Write of size 4 at addr c3a61540 by task wlan0-tx/95 KASAN detects that we are writing data beyond range allocated to vmm_table. There is indeed a mismatch between the size passed to allocator in wilc_wlan_init, and the range of possible indexes used later: allocation size is missing a multiplication by sizeof(u32)

5.6 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 4.7

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/05ac1a198a63ad66bf5ae8b7321407c102d40ef3 Patch
https://git.kernel.org/stable/c/3ce1c2c3999b232258f7aabab311d47dda75605c Patch
https://git.kernel.org/stable/c/4b0d6ddb6466d10df878a7787f175a0e4adc3e27 Patch
https://git.kernel.org/stable/c/541b3757fd443a68ed8d25968eae511a8275e7c8 Patch
https://git.kernel.org/stable/c/6aaf7cd8bdfe245d3c9a8b48fe70c2011965948e Patch
https://git.kernel.org/stable/c/05ac1a198a63ad66bf5ae8b7321407c102d40ef3 Patch
https://git.kernel.org/stable/c/3ce1c2c3999b232258f7aabab311d47dda75605c Patch
https://git.kernel.org/stable/c/4b0d6ddb6466d10df878a7787f175a0e4adc3e27 Patch
https://git.kernel.org/stable/c/541b3757fd443a68ed8d25968eae511a8275e7c8 Patch
https://git.kernel.org/stable/c/6aaf7cd8bdfe245d3c9a8b48fe70c2011965948e Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

02 Apr 2025, 15:03

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CWE CWE-129
References () https://git.kernel.org/stable/c/05ac1a198a63ad66bf5ae8b7321407c102d40ef3 - () https://git.kernel.org/stable/c/05ac1a198a63ad66bf5ae8b7321407c102d40ef3 - Patch
References () https://git.kernel.org/stable/c/3ce1c2c3999b232258f7aabab311d47dda75605c - () https://git.kernel.org/stable/c/3ce1c2c3999b232258f7aabab311d47dda75605c - Patch
References () https://git.kernel.org/stable/c/4b0d6ddb6466d10df878a7787f175a0e4adc3e27 - () https://git.kernel.org/stable/c/4b0d6ddb6466d10df878a7787f175a0e4adc3e27 - Patch
References () https://git.kernel.org/stable/c/541b3757fd443a68ed8d25968eae511a8275e7c8 - () https://git.kernel.org/stable/c/541b3757fd443a68ed8d25968eae511a8275e7c8 - Patch
References () https://git.kernel.org/stable/c/6aaf7cd8bdfe245d3c9a8b48fe70c2011965948e - () https://git.kernel.org/stable/c/6aaf7cd8bdfe245d3c9a8b48fe70c2011965948e - Patch

21 Nov 2024, 08:40

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/05ac1a198a63ad66bf5ae8b7321407c102d40ef3 - () https://git.kernel.org/stable/c/05ac1a198a63ad66bf5ae8b7321407c102d40ef3 -
References () https://git.kernel.org/stable/c/3ce1c2c3999b232258f7aabab311d47dda75605c - () https://git.kernel.org/stable/c/3ce1c2c3999b232258f7aabab311d47dda75605c -
References () https://git.kernel.org/stable/c/4b0d6ddb6466d10df878a7787f175a0e4adc3e27 - () https://git.kernel.org/stable/c/4b0d6ddb6466d10df878a7787f175a0e4adc3e27 -
References () https://git.kernel.org/stable/c/541b3757fd443a68ed8d25968eae511a8275e7c8 - () https://git.kernel.org/stable/c/541b3757fd443a68ed8d25968eae511a8275e7c8 -
References () https://git.kernel.org/stable/c/6aaf7cd8bdfe245d3c9a8b48fe70c2011965948e - () https://git.kernel.org/stable/c/6aaf7cd8bdfe245d3c9a8b48fe70c2011965948e -

05 Nov 2024, 18:35

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: wifi: wilc1000: use vmm_table como matriz en wilc struct. Al habilitar KASAN y ejecutar algunas pruebas de iperf se generan algunos problemas de memoria con vmm_table: BUG: KASAN: slab-out-of-bounds en wilc_wlan_handle_txq +0x6ac/0xdb4 Escritura de tamaño 4 en la dirección c3a61540 mediante la tarea wlan0-tx/95 KASAN detecta que estamos escribiendo datos más allá del rango asignado a vmm_table. De hecho, existe una discrepancia entre el tamaño pasado al asignador en wilc_wlan_init y el rango de posibles índices utilizados más adelante: al tamaño de la asignación le falta una multiplicación por sizeof(u32)
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.6

21 May 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-21 16:15

Updated : 2025-04-02 15:03

NVD link : CVE-2023-52768

Mitre link : CVE-2023-52768

CVE.ORG link : CVE-2023-52768

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-129

Improper Validation of Array Index