Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: hsr: Prevent use after free in prp_create_tagged_frame() The prp_fill_rct() function can fail. In that situation, it frees the skb and returns NULL. Meanwhile on the success path, it returns the original skb. So it's straight forward to fix bug by using the returned value.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 5.9, < 5.10.201 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/stable/c/1787b9f0729d318d67cf7c5a95f0c3dba9a7cc18Patch
- https://git.kernel.org/stable/c/6086258bd5ea7b5c706ff62da42b8e271b2401dbPatch
- https://git.kernel.org/stable/c/876f8ab52363f649bcc74072157dfd7adfbabc0dPatch
- https://git.kernel.org/stable/c/a1a485e45d24b1cd8fe834fd6f1b06e2903827daPatch
- https://git.kernel.org/stable/c/d103fb6726904e353b4773188ee3d3acb4078363Patch
- https://git.kernel.org/stable/c/ddf4e04e946aaa6c458b8b6829617cc44af2bffdPatch
- https://git.kernel.org/stable/c/1787b9f0729d318d67cf7c5a95f0c3dba9a7cc18Patch
- https://git.kernel.org/stable/c/6086258bd5ea7b5c706ff62da42b8e271b2401dbPatch
- https://git.kernel.org/stable/c/876f8ab52363f649bcc74072157dfd7adfbabc0dPatch
- https://git.kernel.org/stable/c/a1a485e45d24b1cd8fe834fd6f1b06e2903827daPatch
- https://git.kernel.org/stable/c/d103fb6726904e353b4773188ee3d3acb4078363Patch
- https://git.kernel.org/stable/c/ddf4e04e946aaa6c458b8b6829617cc44af2bffdPatch
FAQ
What is CVE-2023-52846?
CVE-2023-52846 is a vulnerability with a CVSS score of 7.8 (HIGH). In the Linux kernel, the following vulnerability has been resolved: hsr: Prevent use after free in prp_create_tagged_frame() The prp_fill_rct() function can fail. In that situation, it frees the sk...
How severe is CVE-2023-52846?
CVE-2023-52846 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-52846?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.