Log in Start free

Vulnerability · Published Mar 2, 2024 · Assigned by Linux

CVE-2023-52513RDMA/siw: Fix connection failure handling

High 7.5

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.7%top 48.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix connection failure handling In case immediate MPA request processing fails, the newly created endpoint unlinks the listening endpoint and is ready to be dropped. This special case was not handled correctly by the code handling the later TCP socket close, causing a NULL dereference crash in siw_cm_work_handler() when dereferencing a NULL listener. We now also cancel the useless MPA timeout, if immediate MPA request processing fails. This patch furthermore simplifies MPA processing in general: Scheduling a useless TCP socket read in sk_data_ready() upcall is now surpressed, if the socket is already moved out of TCP_ESTABLISHED state.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8bpftool4.18.0-553.5.1.el8_10ALSA-2024:3618
AlmaLinux:8kernel4.18.0-553.5.1.el8_10ALSA-2024:3618
AlmaLinux:8kernel-abi-stablelists4.18.0-553.5.1.el8_10ALSA-2024:3618
AlmaLinux:8kernel-core4.18.0-553.5.1.el8_10ALSA-2024:3618
AlmaLinux:8kernel-cross-headers4.18.0-553.5.1.el8_10ALSA-2024:3618
AlmaLinux:8kernel-debug4.18.0-553.5.1.el8_10ALSA-2024:3618
AlmaLinux:8kernel-debug-core4.18.0-553.5.1.el8_10ALSA-2024:3618
AlmaLinux:8kernel-debug-devel4.18.0-553.5.1.el8_10ALSA-2024:3618
AlmaLinux:8kernel-debug-modules4.18.0-553.5.1.el8_10ALSA-2024:3618
AlmaLinux:8kernel-debug-modules-extra4.18.0-553.5.1.el8_10ALSA-2024:3618
AlmaLinux:8kernel-devel4.18.0-553.5.1.el8_10ALSA-2024:3618
AlmaLinux:8kernel-doc4.18.0-553.5.1.el8_10ALSA-2024:3618
AlmaLinux:8kernel-headers4.18.0-553.5.1.el8_10ALSA-2024:3618
AlmaLinux:8kernel-modules4.18.0-553.5.1.el8_10ALSA-2024:3618
AlmaLinux:8kernel-modules-extra4.18.0-553.5.1.el8_10ALSA-2024:3618
AlmaLinux:8kernel-rt4.18.0-553.5.1.rt7.346.el8_10ALSA-2024:3627
AlmaLinux:8kernel-rt-core4.18.0-553.5.1.rt7.346.el8_10ALSA-2024:3627
AlmaLinux:8kernel-rt-debug4.18.0-553.5.1.rt7.346.el8_10ALSA-2024:3627
AlmaLinux:8kernel-rt-debug-core4.18.0-553.5.1.rt7.346.el8_10ALSA-2024:3627
AlmaLinux:8kernel-rt-debug-devel4.18.0-553.5.1.rt7.346.el8_10ALSA-2024:3627
AlmaLinux:8kernel-rt-debug-kvm4.18.0-553.5.1.rt7.346.el8_10ALSA-2024:3627
AlmaLinux:8kernel-rt-debug-modules4.18.0-553.5.1.rt7.346.el8_10ALSA-2024:3627
AlmaLinux:8kernel-rt-debug-modules-extra4.18.0-553.5.1.rt7.346.el8_10ALSA-2024:3627
AlmaLinux:8kernel-rt-devel4.18.0-553.5.1.rt7.346.el8_10ALSA-2024:3627
AlmaLinux:8kernel-rt-kvm4.18.0-553.5.1.rt7.346.el8_10ALSA-2024:3627
AlmaLinux:8kernel-rt-modules4.18.0-553.5.1.rt7.346.el8_10ALSA-2024:3627
AlmaLinux:8kernel-rt-modules-extra4.18.0-553.5.1.rt7.346.el8_10ALSA-2024:3627
AlmaLinux:8kernel-tools4.18.0-553.5.1.el8_10ALSA-2024:3618
AlmaLinux:8kernel-tools-libs4.18.0-553.5.1.el8_10ALSA-2024:3618
AlmaLinux:8kernel-tools-libs-devel4.18.0-553.5.1.el8_10ALSA-2024:3618
AlmaLinux:8kernel-zfcpdump4.18.0-553.5.1.el8_10ALSA-2024:3618
AlmaLinux:8kernel-zfcpdump-core4.18.0-553.5.1.el8_10ALSA-2024:3618
AlmaLinux:8kernel-zfcpdump-devel4.18.0-553.5.1.el8_10ALSA-2024:3618
AlmaLinux:8kernel-zfcpdump-modules4.18.0-553.5.1.el8_10ALSA-2024:3618
AlmaLinux:8kernel-zfcpdump-modules-extra4.18.0-553.5.1.el8_10ALSA-2024:3618
AlmaLinux:8perf4.18.0-553.5.1.el8_10ALSA-2024:3618
AlmaLinux:8python3-perf4.18.0-553.5.1.el8_10ALSA-2024:3618
Debian:12linux6.1.64-1DEBIAN-CVE-2023-52513
Debian:13linux6.5.8-1DEBIAN-CVE-2023-52513
Debian:14linux6.5.8-1DEBIAN-CVE-2023-52513
Rocky Linux:8kernel0:4.18.0-553.5.1.el8_10RLSA-2024:3618
Rocky Linux:8kernel-rt0:4.18.0-553.5.1.rt7.346.el8_10RLSA-2024:3627
Ubuntu:22.04:LTSlinux5.15.0-94.104UBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-aws5.15.0-1053.58UBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-azure5.15.0-1056.64UBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1056.64.1UBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-gcp5.15.0-1051.59UBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-gcp-6.56.5.0-1013.13~22.04.1UBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-gke5.15.0-1050.55UBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1036.42UBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-hwe-6.56.5.0-17.17~22.04.1UBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-ibm5.15.0-1046.49UBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1047.53UBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-kvm5.15.0-1050.55UBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-94.104UBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.56.5.0-17.17.1.1.1~22.04.1UBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1044.44UBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-nvidia-6.56.5.0-1014.14UBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1022.22UBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1009.9UBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-oem-6.56.5.0-1014.15UBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-oracle5.15.0-1051.57UBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-oracle-6.56.5.0-1015.15~22.04.1UBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-raspi5.15.0-1046.49UBUNTU-CVE-2023-52513
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2023-52513
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1027.31UBUNTU-CVE-2023-52513

Affected products (as reported)

VendorProductVersions
Linux Linux 6c52fdc244b5ccc468006fd65a504d4ee33743c7 – before 6e26812e289b374c17677d238164a5a8f57705946c52fdc244b5ccc468006fd65a504d4ee33743c7 – before 0d520cdb0cd095eac5d00078dfd318408c9b5eed6c52fdc244b5ccc468006fd65a504d4ee33743c7 – before 81b7bf367eea795d259d0261710c6a89f548844d6c52fdc244b5ccc468006fd65a504d4ee33743c7 – before 5cf38e638e5d01b68f9133968a85e8b3fd1ecf2f6c52fdc244b5ccc468006fd65a504d4ee33743c7 – before eeafc50a77f6a783c2c44e7ec3674a7b693e06f86c52fdc244b5ccc468006fd65a504d4ee33743c7 – before 53a3f777049771496f791504e7dc8ef017cba590
Linux Linux 5.3

References