Description
In the Linux kernel, the following vulnerability has been resolved:

net: nfc: llcp: Add lock when modifying device list

The device list needs its associated lock held when modifying it, or the
list could become corrupted, as syzbot discovered.
Published: 2024-03-02
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Ubuntu USN Ubuntu USN USN-6777-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-6777-2 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-6777-3 Linux kernel (GCP) vulnerabilities
Ubuntu USN Ubuntu USN USN-6777-4 Linux kernel (HWE) vulnerabilities
Ubuntu USN Ubuntu USN USN-6778-1 Linux kernel vulnerabilities
History

Tue, 14 Jan 2025 08:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-667
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.6:rc4:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 6.7, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}

cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}


Mon, 04 Nov 2024 13:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T12:49:09.323Z

Reserved: 2024-02-20T12:30:33.317Z

Link: CVE-2023-52524

cve-icon Vulnrichment

Updated: 2024-08-02T23:03:20.704Z

cve-icon NVD

Status : Analyzed

Published: 2024-03-02T22:15:48.263

Modified: 2025-01-13T20:00:51.600

Link: CVE-2023-52524

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-03-02T00:00:00Z

Links: CVE-2023-52524 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses