CVE-2023-52807 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs The hns3 driver define an array of string to show the coalesce info, but if the kernel adds a new mode or a new state, out-of-bounds access may occur when coalesce info is read via debugfs, this patch fix the problem.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/07f5b8c47152cadbd9102e053dcb60685820aa09
https://git.kernel.org/stable/c/53aba458f23846112c0d44239580ff59bc5c36c3
https://git.kernel.org/stable/c/be1f703f39efa27b7371b9a4cd983317f1366792
https://git.kernel.org/stable/c/f79d985c69060047426be68b7e4c1663d5d731b4
https://lore.kernel.org/linux-cve-announce/2024052101-CVE-2023-52807-dcb9@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-52807
https://www.cve.org/CVERecord?id=CVE-2023-52807

History

Mon, 04 Nov 2024 15:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-21T15:31:17.686Z

Updated: 2024-11-04T14:53:05.729Z

Reserved: 2024-05-21T15:19:24.248Z

Link: CVE-2023-52807

Vulnrichment

Updated: 2024-08-02T23:11:35.914Z

NVD

Status : Awaiting Analysis

Published: 2024-05-21T16:15:19.033

Modified: 2024-05-21T16:53:56.550

Link: CVE-2023-52807

Redhat

Severity : Low

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2023-52807 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-52807", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-21T15:19:24.248Z", "datePublished": "2024-05-21T15:31:17.686Z", "dateUpdated": "2024-11-04T14:53:05.729Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T14:53:05.729Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs\n\nThe hns3 driver define an array of string to show the coalesce\ninfo, but if the kernel adds a new mode or a new state,\nout-of-bounds access may occur when coalesce info is read via\ndebugfs, this patch fix the problem."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/hisilicon/hns3/hns3_debugfs.c"], "versions": [{"version": "c99fead7cb07", "lessThan": "07f5b8c47152", "status": "affected", "versionType": "git"}, {"version": "c99fead7cb07", "lessThan": "be1f703f39ef", "status": "affected", "versionType": "git"}, {"version": "c99fead7cb07", "lessThan": "f79d985c6906", "status": "affected", "versionType": "git"}, {"version": "c99fead7cb07", "lessThan": "53aba458f238", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/hisilicon/hns3/hns3_debugfs.c"], "versions": [{"version": "5.16", "status": "affected"}, {"version": "0", "lessThan": "5.16", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.64", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.5.13", "lessThanOrEqual": "6.5.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.3", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.7", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/07f5b8c47152cadbd9102e053dcb60685820aa09"}, {"url": "https://git.kernel.org/stable/c/be1f703f39efa27b7371b9a4cd983317f1366792"}, {"url": "https://git.kernel.org/stable/c/f79d985c69060047426be68b7e4c1663d5d731b4"}, {"url": "https://git.kernel.org/stable/c/53aba458f23846112c0d44239580ff59bc5c36c3"}], "title": "net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-06-17T17:36:46.627147Z", "id": "CVE-2023-52807", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-17T17:37:02.706Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:11:35.914Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/07f5b8c47152cadbd9102e053dcb60685820aa09", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/be1f703f39efa27b7371b9a4cd983317f1366792", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/f79d985c69060047426be68b7e4c1663d5d731b4", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/53aba458f23846112c0d44239580ff59bc5c36c3", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/07f5b8c47152cadbd9102e053dcb60685820aa09", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/be1f703f39efa27b7371b9a4cd983317f1366792", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/f79d985c69060047426be68b7e4c1663d5d731b4", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/53aba458f23846112c0d44239580ff59bc5c36c3", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:11:35.914Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-52807", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-17T17:36:46.627147Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-17T17:36:47.676Z"}}], "cna": {"title": "net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "c99fead7cb07", "lessThan": "07f5b8c47152", "versionType": "git"}, {"status": "affected", "version": "c99fead7cb07", "lessThan": "be1f703f39ef", "versionType": "git"}, {"status": "affected", "version": "c99fead7cb07", "lessThan": "f79d985c6906", "versionType": "git"}, {"status": "affected", "version": "c99fead7cb07", "lessThan": "53aba458f238", "versionType": "git"}], "programFiles": ["drivers/net/ethernet/hisilicon/hns3/hns3_debugfs.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.16"}, {"status": "unaffected", "version": "0", "lessThan": "5.16", "versionType": "semver"}, {"status": "unaffected", "version": "6.1.64", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.5.13", "versionType": "semver", "lessThanOrEqual": "6.5.*"}, {"status": "unaffected", "version": "6.6.3", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.7", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/net/ethernet/hisilicon/hns3/hns3_debugfs.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/07f5b8c47152cadbd9102e053dcb60685820aa09"}, {"url": "https://git.kernel.org/stable/c/be1f703f39efa27b7371b9a4cd983317f1366792"}, {"url": "https://git.kernel.org/stable/c/f79d985c69060047426be68b7e4c1663d5d731b4"}, {"url": "https://git.kernel.org/stable/c/53aba458f23846112c0d44239580ff59bc5c36c3"}], "x_generator": {"engine": "bippy-9e1c9544281a"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs\n\nThe hns3 driver define an array of string to show the coalesce\ninfo, but if the kernel adds a new mode or a new state,\nout-of-bounds access may occur when coalesce info is read via\ndebugfs, this patch fix the problem."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T14:53:05.729Z"}}}, "cveMetadata": {"cveId": "CVE-2023-52807", "state": "PUBLISHED", "dateUpdated": "2024-11-04T14:53:05.729Z", "dateReserved": "2024-05-21T15:19:24.248Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-21T15:31:17.686Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}