CVE-2023-52763 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data. The `i3c_master_bus_init` function may attach the I2C devices before the I3C bus initialization. In this flow, the DAT `alloc_entry`` will be used before the DAT `init`. Additionally, if the `i3c_master_bus_init` fails, the DAT `cleanup` will execute before the device is detached, which will execue DAT `free_entry` function. The above scenario can cause the driver to use DAT_data when it is NULL.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/39c71357e68e2f03766f9321b9f4882e49ff1442
https://git.kernel.org/stable/c/3cb79a365e7cce8f121bba91312e2ddd206b9781
https://git.kernel.org/stable/c/b53e9758a31c683fc8615df930262192ed5f034b
https://git.kernel.org/stable/c/e64d23dc65810be4e3395d72df0c398f60c991f9
https://git.kernel.org/stable/c/eed74230435c61eeb58abaa275b1820e6a4b7f02
https://lore.kernel.org/linux-cve-announce/2024052148-CVE-2023-52763-34b7@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-52763
https://www.cve.org/CVERecord?id=CVE-2023-52763

History

Mon, 04 Nov 2024 15:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-21T15:30:48.369Z

Updated: 2024-11-04T14:52:13.211Z

Reserved: 2024-05-21T15:19:24.238Z

Link: CVE-2023-52763

Vulnrichment

Updated: 2024-08-02T23:11:36.004Z

NVD

Status : Awaiting Analysis

Published: 2024-05-21T16:15:15.630

Modified: 2024-05-21T16:53:56.550

Link: CVE-2023-52763

Redhat

Severity : Low

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2023-52763 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-52763", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-21T15:19:24.238Z", "datePublished": "2024-05-21T15:30:48.369Z", "dateUpdated": "2024-11-04T14:52:13.211Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T14:52:13.211Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ni3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data.\n\nThe `i3c_master_bus_init` function may attach the I2C devices before the\nI3C bus initialization. In this flow, the DAT `alloc_entry`` will be used\nbefore the DAT `init`. Additionally, if the `i3c_master_bus_init` fails,\nthe DAT `cleanup` will execute before the device is detached, which will\nexecue DAT `free_entry` function. The above scenario can cause the driver\nto use DAT_data when it is NULL."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/i3c/master/mipi-i3c-hci/dat_v1.c"], "versions": [{"version": "1da177e4c3f4", "lessThan": "39c71357e68e", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "e64d23dc6581", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "3cb79a365e7c", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "eed74230435c", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "b53e9758a31c", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/i3c/master/mipi-i3c-hci/dat_v1.c"], "versions": [{"version": "5.15.140", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.64", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.5.13", "lessThanOrEqual": "6.5.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.3", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.7", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/39c71357e68e2f03766f9321b9f4882e49ff1442"}, {"url": "https://git.kernel.org/stable/c/e64d23dc65810be4e3395d72df0c398f60c991f9"}, {"url": "https://git.kernel.org/stable/c/3cb79a365e7cce8f121bba91312e2ddd206b9781"}, {"url": "https://git.kernel.org/stable/c/eed74230435c61eeb58abaa275b1820e6a4b7f02"}, {"url": "https://git.kernel.org/stable/c/b53e9758a31c683fc8615df930262192ed5f034b"}], "title": "i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data.", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-52763", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-22T19:40:16.388139Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:22:49.181Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:11:36.004Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/39c71357e68e2f03766f9321b9f4882e49ff1442", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/e64d23dc65810be4e3395d72df0c398f60c991f9", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/3cb79a365e7cce8f121bba91312e2ddd206b9781", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/eed74230435c61eeb58abaa275b1820e6a4b7f02", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/b53e9758a31c683fc8615df930262192ed5f034b", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/39c71357e68e2f03766f9321b9f4882e49ff1442", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/e64d23dc65810be4e3395d72df0c398f60c991f9", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/3cb79a365e7cce8f121bba91312e2ddd206b9781", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/eed74230435c61eeb58abaa275b1820e6a4b7f02", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/b53e9758a31c683fc8615df930262192ed5f034b", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:11:36.004Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-52763", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-22T19:40:16.388139Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-22T19:40:22.237Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data.", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "1da177e4c3f4", "lessThan": "39c71357e68e", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "e64d23dc6581", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "3cb79a365e7c", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "eed74230435c", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "b53e9758a31c", "versionType": "git"}], "programFiles": ["drivers/i3c/master/mipi-i3c-hci/dat_v1.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "unaffected", "version": "5.15.140", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.64", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.5.13", "versionType": "semver", "lessThanOrEqual": "6.5.*"}, {"status": "unaffected", "version": "6.6.3", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.7", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/i3c/master/mipi-i3c-hci/dat_v1.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/39c71357e68e2f03766f9321b9f4882e49ff1442"}, {"url": "https://git.kernel.org/stable/c/e64d23dc65810be4e3395d72df0c398f60c991f9"}, {"url": "https://git.kernel.org/stable/c/3cb79a365e7cce8f121bba91312e2ddd206b9781"}, {"url": "https://git.kernel.org/stable/c/eed74230435c61eeb58abaa275b1820e6a4b7f02"}, {"url": "https://git.kernel.org/stable/c/b53e9758a31c683fc8615df930262192ed5f034b"}], "x_generator": {"engine": "bippy-9e1c9544281a"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ni3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data.\n\nThe `i3c_master_bus_init` function may attach the I2C devices before the\nI3C bus initialization. In this flow, the DAT `alloc_entry`` will be used\nbefore the DAT `init`. Additionally, if the `i3c_master_bus_init` fails,\nthe DAT `cleanup` will execute before the device is detached, which will\nexecue DAT `free_entry` function. The above scenario can cause the driver\nto use DAT_data when it is NULL."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T14:52:13.211Z"}}}, "cveMetadata": {"cveId": "CVE-2023-52763", "state": "PUBLISHED", "dateUpdated": "2024-11-04T14:52:13.211Z", "dateReserved": "2024-05-21T15:19:24.238Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-21T15:30:48.369Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}

{"bugzilla": {"description": "kernel: i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data.", "id": "2282710", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2282710"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.4", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-158", "details": ["In the Linux kernel, the following vulnerability has been resolved:\ni3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data.\nThe `i3c_master_bus_init` function may attach the I2C devices before the\nI3C bus initialization. In this flow, the DAT `alloc_entry`` will be used\nbefore the DAT `init`. Additionally, if the `i3c_master_bus_init` fails,\nthe DAT `cleanup` will execute before the device is detached, which will\nexecue DAT `free_entry` function. The above scenario can cause the driver\nto use DAT_data when it is NULL."], "name": "CVE-2023-52763", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-05-21T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2023-52763\nhttps://nvd.nist.gov/vuln/detail/CVE-2023-52763\nhttps://lore.kernel.org/linux-cve-announce/2024052148-CVE-2023-52763-34b7@gregkh/T"], "threat_severity": "Low", "upstream_fix": "kernel 5.15.140, kernel 6.1.64, kernel 6.5.13, kernel 6.6.3, kernel 6.7"}