Riskcovery

CVE-2023-52746

xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()

State
Published
Severity
2.5 Low
Published
May 21, 2024
Updated
May 11, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()

int type = nla_type(nla);

if (type > XFRMA_MAX) { return -EOPNOTSUPP; }

@type is then used as an array index and can be used as a Spectre v1 gadget.

if (nla_len(nla) < compat_policy[type].len) {

array_index_nospec() can be used to prevent leaking content of kernel memory to malicious users.

Scores

CVSSScoreVectorSource
3.12.5 LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:NCISA-ADP

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5106f4a8acff480e244300bc5097c0ad7048c3a2 to before a893cc644812728e86e9aff517fd5698812ecef0Affected
  • 5106f4a8acff480e244300bc5097c0ad7048c3a2 to before 5dc688fae6b7be9dbbf5304a3d2520d038e06db5Affected
  • 5106f4a8acff480e244300bc5097c0ad7048c3a2 to before 419674224390fca298020fc0751a20812f84b12dAffected
  • 5106f4a8acff480e244300bc5097c0ad7048c3a2 to before b6ee896385380aa621102e8ea402ba12db1cabffAffected
LinuxLinux
  • 5.10Affected
  • before 5.10Not affected
  • 5.10.168 through 5.10.*Not affected
  • 5.15.94 through 5.15.*Not affected
  • 6.1.12 through 6.1.*Not affected
  • 6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.