CVE-2023-52524
net: nfc: llcp: Add lock when modifying device list
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
02 Mar 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In the Linux kernel, the following vulnerability has been resolved:
net: nfc: llcp: Add lock when modifying device list
The device list needs its associated lock held when modifying it, or the
list could become corrupted, as syzbot discovered.
Affected products
Linux · LinuxReferences
https://git.kernel.org/stable/c/191d87a19cf1005ecf41e1ae08d74e17379e8391https://git.kernel.org/stable/c/29c16c2bf5866326d5fbc4a537b3997fcac23391https://git.kernel.org/stable/c/4837a192f6d06d5bb2f3f47d6ce5353ab69bf86bhttps://git.kernel.org/stable/c/7562780e32b84196731d57dd24563546fcf6d082https://git.kernel.org/stable/c/dba849cc98113b145c6e720122942c00b8012bdbhttps://git.kernel.org/stable/c/dfc7f7a988dad34c3bf4c053124fb26aa6c5f916