CVE-2023-52999

Summary

CVE-2023-52999: A vulnerability was discovered in the Linux kernel that could lead to an out-of-bounds write in the net namespace operations registration error path. If net_assign_generic() fails, the gen pointer slot is cleared, but the gen pointer itself has not been modified yet, causing an out-of-bounds error. This issue has been resolved by skipping the gen pointer de-reference in the error path. The vulnerability was discovered through code inspection and confirmed with explicit error injection on a kasan-enabled kernel. The affected kernel versions are not specified in the provided information.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.