Go to homepageCyberStrike

Menu

Star on GitHub · 3.2k
Sign inDownload

CVE-2023-52578

7.0 · HIGH

In the Linux kernel, the following vulnerability has been resolved: net: bridge: use DEV_STATS_INC() syzbot/KCSAN reported data-races in br_handle_frame_finish() [1] This function can run from mu…

Published Mar 2, 2024CWE-362EPSS 0.19%

Overview

CVE-2023-52578 is a high-severity vulnerability. It was published on March 2, 2024 and has a CVSS 3.1 base score of 7.0 (HIGH).

This vulnerability has a CVSS 3.1 base score of 7.0, rated HIGH. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical description

In the Linux kernel, the following vulnerability has been resolved:

net: bridge: use DEV_STATS_INC()

syzbot/KCSAN reported data-races in br_handle_frame_finish() [1]

This function can run from multiple cpus without mutual exclusion.

Adopt SMP safe DEV_STATS_INC() to update dev->stats fields.

Handles updates to dev->stats.tx_dropped while we are at it.

[1]

BUG: KCSAN: data-race in br_handle_frame_finish / br_handle_frame_finish

read-write to 0xffff8881374b2178 of 8 bytes by interrupt on cpu 1:

br_handle_frame_finish+0xd4f/0xef0 net/bridge/br_input.c:189

br_nf_hook_thresh+0x1ed/0x220

br_nf_pre_routing_finish_ipv6+0x50f/0x540

NF_HOOK include/linux/netfilter.h:304 [inline]

br_nf_pre_routing_ipv6+0x1e3/0x2a0 net/bridge/br_netfilter_ipv6.c:178

br_nf_pre_routing+0x526/0xba0 net/bridge/br_netfilter_hooks.c:508

nf_hook_entry_hookfn include/linux/netfilter.h:144 [inline]

nf_hook_bridge_pre net/bridge/br_input.c:272 [inline]

br_handle_frame+0x4c9/0x940 net/bridge/br_input.c:417

__netif_rece

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References

Refgit.kernel.org/stable/c/04cc361f029c14dd067ad180525c7392334c9bfdRefgit.kernel.org/stable/c/44bdb313da57322c9b3c108eb66981c6ec6509f4Refgit.kernel.org/stable/c/89f9f20b1cbd36d99d5a248a4bf8d11d4fd049a2Refgit.kernel.org/stable/c/8bc97117b51d68d5cea8f5351cca2d8c4153f394Refgit.kernel.org/stable/c/ad8d39c7b437fcdab7208a6a56c093d222c008d5Refgit.kernel.org/stable/c/d2346e6beb699909ca455d9d20c4e577ce900839Refgit.kernel.org/stable/c/f2ef4cb4d418fa64fe73eb84d10cc5c0e52e00faRefgit.kernel.org/stable/c/04cc361f029c14dd067ad180525c7392334c9bfdRefgit.kernel.org/stable/c/44bdb313da57322c9b3c108eb66981c6ec6509f4Refgit.kernel.org/stable/c/89f9f20b1cbd36d99d5a248a4bf8d11d4fd049a2

How CyberStrike helps

Frequently asked questions

What is CVE-2023-52578?

CVE-2023-52578 is a high-severity vulnerability. It was published on March 2, 2024 and has a CVSS 3.1 base score of 7.0 (HIGH).

How severe is CVE-2023-52578?

This vulnerability has a CVSS 3.1 base score of 7.0, rated HIGH. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2023-52578?

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2023-52578?

CyberStrike is an open-source, AI-augmented pentesting engine. Rather than flag a version number, it tests whether an issue like CVE-2023-52578 is actually reachable in your own applications and APIs, then verifies each finding before reporting it. That tells you if the weakness is a real, exploitable risk in your environment or a false positive you can safely deprioritize.

Related HIGH CVEs from 2023

View all
Browse by year2026202520242023202220212020201920182017201620152014201320122011201020092008200720062005200420032002200120001999