CVE-2023-52787

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52787
In the Linux kernel, the following vulnerability has been resolved: blk-mq: make sure active queue usage is held for bio_integrity_prep() blk_integrity_unregister() can come if queue usage counter isn't held for one bio with integrity prepared, so this request may be completed with calling profile->complete_fn, then kernel panic. Another constraint is that bio_integrity_prep() needs to be called before bio merge. Fix the issue by: - call bio_integrity_prep() with one queue usage counter grabbed reliably - call bio_integrity_prep() before bio merge

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/b0077e269f6c152e807fdac90b58caf012cdbaab Patch
https://git.kernel.org/stable/c/b5c8e0ff76d10f6bf70a7237678f27c20cf59bc9 Patch
https://git.kernel.org/stable/c/b80056bd75a16e4550873ecefe12bc8fd190b1cf Patch
https://git.kernel.org/stable/c/e9c309ded295b7f8849097d71ae231456ca79f78 Patch
https://git.kernel.org/stable/c/b0077e269f6c152e807fdac90b58caf012cdbaab Patch
https://git.kernel.org/stable/c/b5c8e0ff76d10f6bf70a7237678f27c20cf59bc9 Patch
https://git.kernel.org/stable/c/b80056bd75a16e4550873ecefe12bc8fd190b1cf Patch
https://git.kernel.org/stable/c/e9c309ded295b7f8849097d71ae231456ca79f78 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:*
History

26 Sep 2025, 16:23

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/b0077e269f6c152e807fdac90b58caf012cdbaab - () https://git.kernel.org/stable/c/b0077e269f6c152e807fdac90b58caf012cdbaab - Patch
References () https://git.kernel.org/stable/c/b5c8e0ff76d10f6bf70a7237678f27c20cf59bc9 - () https://git.kernel.org/stable/c/b5c8e0ff76d10f6bf70a7237678f27c20cf59bc9 - Patch
References () https://git.kernel.org/stable/c/b80056bd75a16e4550873ecefe12bc8fd190b1cf - () https://git.kernel.org/stable/c/b80056bd75a16e4550873ecefe12bc8fd190b1cf - Patch
References () https://git.kernel.org/stable/c/e9c309ded295b7f8849097d71ae231456ca79f78 - () https://git.kernel.org/stable/c/e9c309ded295b7f8849097d71ae231456ca79f78 - Patch
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:*
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

21 Nov 2024, 08:40

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: blk-mq: asegúrese de que el uso de la cola activa se mantenga para bio_integrity_prep() blk_integrity_unregister() puede aparecer si el contador de uso de la cola no se mantiene para una biografía con integridad preparada, por lo que esta solicitud se puede completar llamando al perfil->complete_fn, luego kernel panic. Otra restricción es que es necesario llamar a bio_integrity_prep() antes de la fusión biológica. Solucione el problema de la siguiente manera: - llame a bio_integrity_prep() con un contador de uso de cola capturado de manera confiable - llame a bio_integrity_prep() antes de fusionar la biografía
References () https://git.kernel.org/stable/c/b0077e269f6c152e807fdac90b58caf012cdbaab - () https://git.kernel.org/stable/c/b0077e269f6c152e807fdac90b58caf012cdbaab -
References () https://git.kernel.org/stable/c/b5c8e0ff76d10f6bf70a7237678f27c20cf59bc9 - () https://git.kernel.org/stable/c/b5c8e0ff76d10f6bf70a7237678f27c20cf59bc9 -
References () https://git.kernel.org/stable/c/b80056bd75a16e4550873ecefe12bc8fd190b1cf - () https://git.kernel.org/stable/c/b80056bd75a16e4550873ecefe12bc8fd190b1cf -
References () https://git.kernel.org/stable/c/e9c309ded295b7f8849097d71ae231456ca79f78 - () https://git.kernel.org/stable/c/e9c309ded295b7f8849097d71ae231456ca79f78 -

21 May 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-21 16:15

Updated : 2025-09-26 16:23

NVD link : CVE-2023-52787

Mitre link : CVE-2023-52787

CVE.ORG link : CVE-2023-52787

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo