CVE-2023-52991

Summary

CVE-2023-52991 is a kernel vulnerability in Linux that affects the net subsystem. The issue was introduced by commit 3a1296a38d0c, which introduced UDP listifyed GRO. This vulnerability occurs when frag_list, which is assumed to be untouched when passing through the network stack, gets pulled into a linear area, leaving it as NULL. Consequently, a NULL pointer dereference occurs in the skb_segment_list function, causing a panic. The known impact includes a kernel crash. The affected functions include udp_queue_rcv_skb, udp_unicast_rcv_skb, ip_protocol_deliver_rcu, ip_local_deliver_finish, and others.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.