#VU90914 Reachable assertion in Linux kernel - CVE-2023-52562
Vulnerability identifier: #VU90914
Vulnerability risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2023-52562
CWE-ID:
CWE-617
Exploitation vector: Local
Exploit availability: No
Vulnerable software:
Linux kernel
Operating systems & Components /
Operating system
Vendor: Linux Foundation
Description
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to reachable assertion within the slab_kmem_cache_release() and kmem_cache_destroy() functions in mm/slab_common.c. A local user can perform a denial of service (DoS) attack.
Mitigation
Install update from vendor's website.
Vulnerable software versions
Linux kernel: 6.1, 6.1 rc1, 6.1 rc3, 6.1 rc7, 6.1.1, 6.1.2, 6.1.3, 6.1.4, 6.1.5, 6.1.6, 6.1.7, 6.1.8, 6.1.9, 6.1.10, 6.1.11, 6.1.12, 6.1.13, 6.1.14, 6.1.15, 6.1.16, 6.1.17, 6.1.18, 6.1.19, 6.1.20, 6.1.21, 6.1.22, 6.1.23, 6.1.24, 6.1.25, 6.1.26, 6.1.27, 6.1.28, 6.1.29, 6.1.30, 6.1.31, 6.1.32, 6.1.33, 6.1.34, 6.1.35, 6.1.36, 6.1.37, 6.1.38, 6.1.39, 6.1.40, 6.1.41, 6.1.42, 6.1.43, 6.1.44, 6.1.45, 6.1.46, 6.1.47, 6.1.48, 6.1.49, 6.1.50, 6.1.51, 6.1.52, 6.1.53, 6.1.54, 6.1.55, 6.5, 6.5 rc1, 6.5 rc5, 6.5 rc7, 6.5.1, 6.5.2, 6.5.3, 6.5.4, 6.5.5, 6.6 rc1, 6.6 rc2, 6.6 rc3, 6.6 rc4, 6.6 rc5, 6.6 rc6
External links
https://git.kernel.org/stable/c/a5569bb187521432f509b69dda7d29f78b2d38b0
https://git.kernel.org/stable/c/51988be187b041e5355245957b0b9751fa382e0d
https://git.kernel.org/stable/c/46a9ea6681907a3be6b6b0d43776dccc62cad6cf
https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.56
https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.6
https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
