CVE-2023-52612

HighCVSS 7.8/10Last modified Oct 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: scomp - fix req->dst buffer overflow

The req->dst buffer size should be checked before copying from the scomp_scratch->dst to avoid req->dst buffer overflow problem.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

VendorProductVersions
LinuxLinux>= 1ab53a77b772bf7369464a0e4fa6fd6499acf8f1, < 1142d65c5b881590962ad763f94505b6dd67d2fe; >= 1ab53a77b772bf7369464a0e4fa6fd6499acf8f1, < e0e3f4a18784182cfe34e20c00eca11e78d53e76; >= 1ab53a77b772bf7369464a0e4fa6fd6499acf8f1, < 4518dc468cdd796757190515a9be7408adc8911e; >= 1ab53a77b772bf7369464a0e4fa6fd6499acf8f1, < a5f2f91b3fd7387e5102060809316a0f8f0bc625; >= 1ab53a77b772bf7369464a0e4fa6fd6499acf8f1, < 4df0c942d04a67df174195ad8082f6e30e7f71a5; >= 1ab53a77b772bf7369464a0e4fa6fd6499acf8f1, < 7d9e5bed036a7f9e2062a137e97e3c1e77fb8759; >= 1ab53a77b772bf7369464a0e4fa6fd6499acf8f1, < 71c6670f9f032ec67d8f4e3f8db4646bf5a62883; >= 1ab53a77b772bf7369464a0e4fa6fd6499acf8f1, < 744e1885922a9943458954cfea917b31064b4131
LinuxLinux4.10
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5

References

Timeline

Published
Mar 18, 2024
Last modified
Oct 15, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-526135.5In the Linux kernel, the following vulnerability has been resolved: drivers/thermal/loongson2_thermal: Fix incorrect PTR_ERR() judgment PTCVE-2023-526147.8In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Fix buffer overflow in trans_stat_show Fix buffer overflCVE-2023-526155.5In the Linux kernel, the following vulnerability has been resolved: hwrng: core - Fix page fault dead lock on mmap-ed hwrng There is a deaCVE-2023-526165.5In the Linux kernel, the following vulnerability has been resolved: crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init When thCVE-2023-526174.4In the Linux kernel, the following vulnerability has been resolved: PCI: switchtec: Fix stdev_release() crash after surprise hot remove A CVE-2023-526185.3In the Linux kernel, the following vulnerability has been resolved: block/rnbd-srv: Check for unlikely string overflow Since "dev_search_pCVE-2023-526195.5In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Fix crash when setting number of cpus to an odd number WheCVE-2023-52628.8A vulnerability has been found in OpenRapid RapidCMS 1.3.1 and classified as critical. Affected by this vulnerability is the function isImg CVE-2023-526202.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: disallow timeout for anonymous sets Never used fCVE-2023-526217.8In the Linux kernel, the following vulnerability has been resolved: bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers TCVE-2023-526225.5In the Linux kernel, the following vulnerability has been resolved: ext4: avoid online resizing failures due to oversized flex bg When we CVE-2023-526235.5In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix a suspicious RCU usage warning I received the following wa
CVE-2023-52612: High severity, CVSS 7.8 | Vulnix