CVE-2023-52846

hsr: Prevent use after free in prp_create_tagged_frame()

State: Published
Severity: 8.8 High
Published: May 21, 2024
Updated: Aug 5, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

hsr: Prevent use after free in prp_create_tagged_frame()

The prp_fill_rct() function can fail. In that situation, it frees the skb and returns NULL. Meanwhile on the success path, it returns the original skb. So it's straight forward to fix bug by using the returned value.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	451d8123f89791bb628277c0bdb4cae34a3563e6 to before ddf4e04e946aaa6c458b8b6829617cc44af2bffdAffected 451d8123f89791bb628277c0bdb4cae34a3563e6 to before a1a485e45d24b1cd8fe834fd6f1b06e2903827daAffected 451d8123f89791bb628277c0bdb4cae34a3563e6 to before 6086258bd5ea7b5c706ff62da42b8e271b2401dbAffected 451d8123f89791bb628277c0bdb4cae34a3563e6 to before 1787b9f0729d318d67cf7c5a95f0c3dba9a7cc18Affected 451d8123f89791bb628277c0bdb4cae34a3563e6 to before d103fb6726904e353b4773188ee3d3acb4078363Affected 451d8123f89791bb628277c0bdb4cae34a3563e6 to before 876f8ab52363f649bcc74072157dfd7adfbabc0dAffected
LinuxLinux	5.9Affected before 5.9Not affected 5.10.201 through 5.10.Not affected 5.15.139 through 5.15.Not affected 6.1.63 through 6.1.Not affected 6.5.12 through 6.5.Not affected 6.6.2 through 6.6.*Not affected 6.7 and laterNot affected

Product

Versions

LinuxLinux

451d8123f89791bb628277c0bdb4cae34a3563e6 to before ddf4e04e946aaa6c458b8b6829617cc44af2bffdAffected
451d8123f89791bb628277c0bdb4cae34a3563e6 to before a1a485e45d24b1cd8fe834fd6f1b06e2903827daAffected
451d8123f89791bb628277c0bdb4cae34a3563e6 to before 6086258bd5ea7b5c706ff62da42b8e271b2401dbAffected
451d8123f89791bb628277c0bdb4cae34a3563e6 to before 1787b9f0729d318d67cf7c5a95f0c3dba9a7cc18Affected
451d8123f89791bb628277c0bdb4cae34a3563e6 to before d103fb6726904e353b4773188ee3d3acb4078363Affected
451d8123f89791bb628277c0bdb4cae34a3563e6 to before 876f8ab52363f649bcc74072157dfd7adfbabc0dAffected

LinuxLinux

5.9Affected
before 5.9Not affected
5.10.201 through 5.10.*Not affected
5.15.139 through 5.15.*Not affected
6.1.63 through 6.1.*Not affected
6.5.12 through 6.5.*Not affected
6.6.2 through 6.6.*Not affected
6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.