CVE-2023-52524

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: nfc: llcp: Add lock when modifying device list

The device list needs its associated lock held when modifying it, or the list could become corrupted, as syzbot discovered.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-667

Affected software

VendorProductVersions
LinuxLinux>= dd6ff3f3862709ab1a12566e73b9d6a9b8f6e548, < 191d87a19cf1005ecf41e1ae08d74e17379e8391; >= 96f2c6f272ec04083d828de46285a7d7b17d1aad, < dba849cc98113b145c6e720122942c00b8012bdb; >= fc8429f8d86801f092fbfbd257c3af821ac0dcd3, < 4837a192f6d06d5bb2f3f47d6ce5353ab69bf86b; >= 425d9d3a92df7d96b3cfb7ee5c240293a21cbde3, < 7562780e32b84196731d57dd24563546fcf6d082; >= 6709d4b7bc2e079241fdef15d1160581c5261c10, < 29c16c2bf5866326d5fbc4a537b3997fcac23391; >= 6709d4b7bc2e079241fdef15d1160581c5261c10, < dfc7f7a988dad34c3bf4c053124fb26aa6c5f916; b3ad46e155a6d91b36c6e892019a43e3ef3c696d; e5207c1d69b1a9707615ab6ff9376e59fc096815; >= 5.4.251, < 5.4.258; >= 5.10.188, < 5.10.198; >= 5.15.121, < 5.15.135; >= 6.1.39, < 6.1.57; >= 6.3.13, < 6.4; >= 6.4.4, < 6.5
LinuxLinux6.5

References

Timeline

Published
Mar 2, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-525257.1In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet OnCVE-2023-525265.5In the Linux kernel, the following vulnerability has been resolved: erofs: fix memory leak of LZMA global compressed deduplication When stCVE-2023-525275.5In the Linux kernel, the following vulnerability has been resolved: ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() InclCVE-2023-525285.5In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg syzCVE-2023-525296.0In the Linux kernel, the following vulnerability has been resolved: HID: sony: Fix a potential memory leak in sony_probe() If an error occCVE-2023-52537.5A missing authentication check in the WebSocket channel used for the Check Point IoT integration in Nozomi Networks Guardian and CMC, may alCVE-2023-525307.8In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix potential key use-after-free When ieee80211_key_liCVE-2023-525317.8In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: Fix a memory corruption issue A few lines above, sCVE-2023-525325.5In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix TX CQE error handling For an unknown TX CQE error type CVE-2023-525335.3In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote information disclosuCVE-2023-525345.9In ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote denial of service with no additioCVE-2023-525354.4In vsp driver, there is a possible missing verification incorrect input. This could lead to local denial of service with no additional execu
CVE-2023-52524: High severity, CVSS 7.8 | Vulnix