In the Linux kernel, the following vulnerability has been resolved:

atl1c: Work around the DMA RX overflow issue

This is based on alx driver commit 881d0327db37 ("net: alx: Work around
the DMA RX overflow issue").

The alx and atl1c drivers had RX overflow error which was why a custom
allocator was created to avoid certain addresses. The simpler workaround
then created for alx driver, but not for atl1c due to lack of tester.

Instead of using a custom allocator, check the allocated skb address and
use skb_reserve() to move away from problematic 0x...fc0 address.

Tested on AR8131 on Acer 4540.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00009.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
43250ddd75a35d1f7926d989a10fefd30c37eaa7 affected < c29a89b23f67ee592f4dee61f9d7efbf86d60315
43250ddd75a35d1f7926d989a10fefd30c37eaa7 affected < 57e44ff9c2c9747b2b1a53556810b0e5192655d6
43250ddd75a35d1f7926d989a10fefd30c37eaa7 affected < 54a6152da4993ec8e4b53dc3cf577f5a2c829afa
43250ddd75a35d1f7926d989a10fefd30c37eaa7 affected < 32f08b7b430ee01ec47d730f961a3306c1c7b6fb
43250ddd75a35d1f7926d989a10fefd30c37eaa7 affected < 86565682e9053e5deb128193ea9e88531bbae9cf
Linux Linux affected
Version Status Constraints
2.6.29 affected —
0 unaffected < 2.6.29
5.15.140 unaffected ≤ 5.15.*
6.1.64 unaffected ≤ 6.1.*
6.5.13 unaffected ≤ 6.5.*
6.6.3 unaffected ≤ 6.6.*
6.7 unaffected ≤ *

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Enterprise Linux 8
kernel-rt-0:4.18.0-553.16.1.rt7.357.el8_10 cpe:/a:redhat:enterprise_linux:8::nfv RHSA-2024:5102 2024-08-08T00:00:00Z
kernel-0:4.18.0-553.16.1.el8_10 cpe:/o:redhat:enterprise_linux:8 RHSA-2024:5101 2024-08-08T00:00:00Z
Red Hat Enterprise Linux 9
kernel-0:5.14.0-503.11.1.el9_5 cpe:/a:redhat:enterprise_linux:9 RHSA-2024:9315 2024-11-12T00:00:00Z
kernel-0:5.14.0-503.11.1.el9_5 cpe:/o:redhat:enterprise_linux:9 RHSA-2024:9315 2024-11-12T00:00:00Z
Red Hat Enterprise Linux 9.4 Extended Update Support
kernel-0:5.14.0-427.76.1.el9_4 cpe:/a:redhat:rhel_eus:9.4 RHSA-2025:10701 2025-07-09T00:00:00Z

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Redhat Subscribe
Enterprise Linux Subscribe
Rhel Eus Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/32f08b7b430ee01ec47d730f961a3306c1c7b6fb cve-icon cve-icon
https://git.kernel.org/stable/c/54a6152da4993ec8e4b53dc3cf577f5a2c829afa cve-icon cve-icon
https://git.kernel.org/stable/c/57e44ff9c2c9747b2b1a53556810b0e5192655d6 cve-icon cve-icon
https://git.kernel.org/stable/c/86565682e9053e5deb128193ea9e88531bbae9cf cve-icon cve-icon
https://git.kernel.org/stable/c/c29a89b23f67ee592f4dee61f9d7efbf86d60315 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024052109-CVE-2023-52834-4c46@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-52834 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-52834 cve-icon
History

Fri, 26 Sep 2025 17:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Thu, 10 Jul 2025 03:15:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhel Eus
CPEs cpe:/a:redhat:rhel_eus:9.4
Vendors & Products Redhat rhel Eus

Thu, 19 Dec 2024 09:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 13 Nov 2024 02:30:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:9

Thu, 08 Aug 2024 19:15:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:8::nfv
cpe:/o:redhat:enterprise_linux:8
Vendors & Products Redhat
Redhat enterprise Linux

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-01-05T10:17:47.147Z

Reserved: 2024-05-21T15:19:24.252Z

Link: CVE-2023-52834

cve-icon Vulnrichment

Updated: 2024-08-02T23:11:36.046Z

cve-icon NVD

Status : Analyzed

Published: 2024-05-21T16:15:20.950

Modified: 2025-09-26T16:47:59.490

Link: CVE-2023-52834

cve-icon Redhat

Severity : Low

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2023-52834 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses