CVE-2023-52523

Summary

CVE-2023-52523 is a vulnerability affecting the Linux kernel, specifically in the bpf and sockmap components. This issue arises due to a hard-coded assumption that the egress socket is a TCP socket, which is no longer the case following commit 122e6c79efe1 that enabled redirects to non-TCP sockets. As a result, attempts to send messages from one TCP socket to egress from a non-TCP socket lead to a crash due to an invalid downcast from sock to tcp_sock. To mitigate this issue, it is recommended to reject non-TCP sockets as redirect targets for BPF sk_msg programs to prevent crashes and ensure proper system functionality.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.