CVE-2023-52735

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself

sock_map proto callbacks should never call themselves by design. Protect against bugs like [1] and break out of the recursive loop to avoid a stack overflow in favor of a resource leak.

[1] https://lore.kernel.org/all/00000000000073b14905ef2e7401@google.com/

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-120

Affected software

VendorProductVersions
LinuxLinux>= c5cc0d23c5414d23438c5024890e367cc5a0e645, < f312367f5246e04df564d341044286e9e37a97ba; >= c5d2177a72a1659554922728fc407f59950aa929, < 7499859881488da97589f3c79cc66fa75748ad49; >= c5d2177a72a1659554922728fc407f59950aa929, < 5b4a79ba65a1ab479903fff2e604865d229b70a9; 0580e47c8895a4d61ee095f086cba1ded7ca5e7f; >= 5.15.3, < 5.15.95; >= 5.14.19, < 5.15
LinuxLinux5.16
linuxlinux_kernel1da177e4c3f4
linuxlinux_kernel—
linuxlinux_kernel—
linuxlinux_kernel—

References

Timeline

Published
May 21, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-527365.5In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Do not unset preset when cleaning up codec Several functionCVE-2023-527375.5In the Linux kernel, the following vulnerability has been resolved: btrfs: lock the inode in shared mode before starting fiemap Currently CVE-2023-527385.3In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini CurCVE-2023-527395.5In the Linux kernel, the following vulnerability has been resolved: Fix page corruption caused by racy check in __free_pages When we upgraCVE-2023-52744.7Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-service (DoS) condition CVE-2023-527404.7In the Linux kernel, the following vulnerability has been resolved: powerpc/64s/interrupt: Fix interrupt exit race with security mitigationCVE-2023-527417.8In the Linux kernel, the following vulnerability has been resolved: cifs: Fix use-after-free in rdata->read_into_pages() When the network CVE-2023-527425.5In the Linux kernel, the following vulnerability has been resolved: net: USB: Fix wrong-direction WARNING in plusb.c The syzbot fuzzer detCVE-2023-527435.5In the Linux kernel, the following vulnerability has been resolved: ice: Do not use WQ_MEM_RECLAIM flag for workqueue When both ice and thCVE-2023-527445.5In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix potential NULL-ptr-dereference in_dev_get() can returnCVE-2023-527455.5In the Linux kernel, the following vulnerability has been resolved: IB/IPoIB: Fix legacy IPoIB due to wrong number of queues The cited comCVE-2023-527462.5In the Linux kernel, the following vulnerability has been resolved: xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
CVE-2023-52735: Critical severity, CVSS 9.1 | Vulnix