Ubuntu: (CVE-2023-52763): linux vulnerability

Ubuntu: (CVE-2023-52763): linux vulnerability

Severity

4

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

05/21/2024

Created

11/21/2024

Added

11/19/2024

Modified

02/11/2025

Description

In the Linux kernel, the following vulnerability has been resolved: i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data. The `i3c_master_bus_init` function may attach the I2C devices before the I3C bus initialization. In this flow, the DAT `alloc_entry`` will be used before the DAT `init`. Additionally, if the `i3c_master_bus_init` fails, the DAT `cleanup` will execute before the device is detached, which will execue DAT `free_entry` function. The above scenario can cause the driver to use DAT_data when it is NULL.

Solution(s)

• ubuntu-upgrade-linux
• ubuntu-upgrade-linux-aws
• ubuntu-upgrade-linux-aws-5-15
• ubuntu-upgrade-linux-aws-fips
• ubuntu-upgrade-linux-azure
• ubuntu-upgrade-linux-azure-5-15
• ubuntu-upgrade-linux-azure-fde
• ubuntu-upgrade-linux-azure-fde-5-15
• ubuntu-upgrade-linux-bluefield
• ubuntu-upgrade-linux-fips
• ubuntu-upgrade-linux-gcp
• ubuntu-upgrade-linux-gcp-5-15
• ubuntu-upgrade-linux-gcp-fips
• ubuntu-upgrade-linux-gke
• ubuntu-upgrade-linux-gkeop
• ubuntu-upgrade-linux-gkeop-5-15
• ubuntu-upgrade-linux-hwe-5-15
• ubuntu-upgrade-linux-ibm
• ubuntu-upgrade-linux-ibm-5-15
• ubuntu-upgrade-linux-intel-iot-realtime
• ubuntu-upgrade-linux-intel-iotg
• ubuntu-upgrade-linux-intel-iotg-5-15
• ubuntu-upgrade-linux-kvm
• ubuntu-upgrade-linux-lowlatency
• ubuntu-upgrade-linux-lowlatency-hwe-5-15
• ubuntu-upgrade-linux-nvidia
• ubuntu-upgrade-linux-nvidia-6-5
• ubuntu-upgrade-linux-oracle
• ubuntu-upgrade-linux-oracle-5-15
• ubuntu-upgrade-linux-raspi
• ubuntu-upgrade-linux-realtime
• ubuntu-upgrade-linux-riscv-5-15
• ubuntu-upgrade-linux-xilinx-zynqmp

References

• https://attackerkb.com/topics/cve-2023-52763
• CVE - 2023-52763
• https://git.kernel.org/linus/b53e9758a31c683fc8615df930262192ed5f034b
• https://git.kernel.org/stable/c/39c71357e68e2f03766f9321b9f4882e49ff1442
• https://git.kernel.org/stable/c/3cb79a365e7cce8f121bba91312e2ddd206b9781
• https://git.kernel.org/stable/c/b53e9758a31c683fc8615df930262192ed5f034b
• https://git.kernel.org/stable/c/e64d23dc65810be4e3395d72df0c398f60c991f9
• https://git.kernel.org/stable/c/eed74230435c61eeb58abaa275b1820e6a4b7f02
• https://www.cve.org/CVERecord?id=CVE-2023-52763

View more