Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2023-52889— apparmor: Fix null pointer deref when receiving skb during sock creation

Quick assessment

Affected

Linux Linux

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于空指针取消引用。

AI Predicted 7.8 Difficulty: Moderate EPSS 0.23% · P13 Updated May 13, 2026

Possible ATT&CK Techniques 1 AI

T1562

Affected Version Matrix 16

Vendor	Product	Version Range	Status
Linux	Linux	`ab9f2115081ab7ba63b77a759e0f3eb5d6463d7f< 0abe35bc48d4ec80424b1f4b3560c0e082cbd5c1`	affected
		`ab9f2115081ab7ba63b77a759e0f3eb5d6463d7f< 347dcb84a4874b5fb375092c08d8cc4069b94f81`	affected
		`ab9f2115081ab7ba63b77a759e0f3eb5d6463d7f< 290a6b88e8c19b6636ed1acc733d1458206f7697`	affected
		`ab9f2115081ab7ba63b77a759e0f3eb5d6463d7f< ead2ad1d9f045f26fdce3ef1644913b3a6cd38f2`	affected
		`ab9f2115081ab7ba63b77a759e0f3eb5d6463d7f< 6c920754f62cefc63fccdc38a062c7c3452e2961`	affected
		`ab9f2115081ab7ba63b77a759e0f3eb5d6463d7f< 46c17ead5b7389e22e7dc9903fd0ba865d05bda2`	affected
		`ab9f2115081ab7ba63b77a759e0f3eb5d6463d7f< fce09ea314505a52f2436397608fa0a5d0934fb1`	affected
		`4.20`	affected
… +8 more rows

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2023-52889

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

apparmor: Fix null pointer deref when receiving skb during sock creation

Source: CVE Program / CVE List V5

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix null pointer deref when receiving skb during sock creation The panic below is observed when receiving ICMP packets with secmark set while an ICMP raw socket is being created. SK_CTX(sk)->label is updated in apparmor_socket_post_create(), but the packet is delivered to the socket before that, causing the null pointer dereference. Drop the packet if label context is not set. BUG: kernel NULL pointer dereference, address: 000000000000004c #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 0 PID: 407 Comm: a.out Not tainted 6.4.12-arch1-1 #1 3e6fa2753a2d75925c34ecb78e22e85a65d083df Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 05/28/2020 RIP: 0010:aa_label_next_confined+0xb/0x40 Code: 00 00 48 89 ef e8 d5 25 0c 00 e9 66 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 0f 1f 44 00 00 89 f0 <8b> 77 4c 39 c6 7e 1f 48 63 d0 48 8d 14 d7 eb 0b 83 c0 01 48 83 c2 RSP: 0018:ffffa92940003b08 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000000000e RDX: ffffa92940003be8 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffff8b57471e7800 R08: ffff8b574c642400 R09: 0000000000000002 R10: ffffffffbd820eeb R11: ffffffffbeb7ff00 R12: ffff8b574c642400 R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 FS: 00007fb092ea7640(0000) GS:ffff8b577bc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000000004c CR3: 00000001020f2005 CR4: 00000000007706f0 PKRU: 55555554 Call Trace: <IRQ> ? __die+0x23/0x70 ? page_fault_oops+0x171/0x4e0 ? exc_page_fault+0x7f/0x180 ? asm_exc_page_fault+0x26/0x30 ? aa_label_next_confined+0xb/0x40 apparmor_secmark_check+0xec/0x330 security_sock_rcv_skb+0x35/0x50 sk_filter_trim_cap+0x47/0x250 sock_queue_rcv_skb_reason+0x20/0x60 raw_rcv+0x13c/0x210 raw_local_deliver+0x1f3/0x250 ip_protocol_deliver_rcu+0x4f/0x2f0 ip_local_deliver_finish+0x76/0xa0 __netif_receive_skb_one_core+0x89/0xa0 netif_receive_skb+0x119/0x170 ? __netdev_alloc_skb+0x3d/0x140 vmxnet3_rq_rx_complete+0xb23/0x1010 [vmxnet3 56a84f9c97178c57a43a24ec073b45a9d6f01f3a] vmxnet3_poll_rx_only+0x36/0xb0 [vmxnet3 56a84f9c97178c57a43a24ec073b45a9d6f01f3a] __napi_poll+0x28/0x1b0 net_rx_action+0x2a4/0x380 __do_softirq+0xd1/0x2c8 __irq_exit_rcu+0xbb/0xf0 common_interrupt+0x86/0xa0 </IRQ> <TASK> asm_common_interrupt+0x26/0x40 RIP: 0010:apparmor_socket_post_create+0xb/0x200 Code: 08 48 85 ff 75 a1 eb b1 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 1f 44 00 00 41 54 <55> 48 89 fd 53 45 85 c0 0f 84 b2 00 00 00 48 8b 1d 80 56 3f 02 48 RSP: 0018:ffffa92940ce7e50 EFLAGS: 00000286 RAX: ffffffffbc756440 RBX: 0000000000000000 RCX: 0000000000000001 RDX: 0000000000000003 RSI: 0000000000000002 RDI: ffff8b574eaab740 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 R10: ffff8b57444cec70 R11: 0000000000000000 R12: 0000000000000003 R13: 0000000000000002 R14: ffff8b574eaab740 R15: ffffffffbd8e4748 ? __pfx_apparmor_socket_post_create+0x10/0x10 security_socket_post_create+0x4b/0x80 __sock_create+0x176/0x1f0 __sys_socket+0x89/0x100 __x64_sys_socket+0x17/0x20 do_syscall_64+0x5d/0x90 ? do_syscall_64+0x6c/0x90 ? do_syscall_64+0x6c/0x90 ? do_syscall_64+0x6c/0x90 entry_SYSCALL_64_after_hwframe+0x72/0xdc

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Linux kernel 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于空指针取消引用。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Linux	Linux	ab9f2115081ab7ba63b77a759e0f3eb5d6463d7f ~ 0abe35bc48d4ec80424b1f4b3560c0e082cbd5c1	-
Linux	Linux	4.20	-

II. Public POCs for CVE-2023-52889

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2023-52889

请登录查看更多情报信息。

Other References for CVE-2023-52889 (6)

https://www.cve.org/CVERecord?id=CVE-2023-52889

Same Patch Batch · Linux · 2024-08-17 · 109 CVEs total

CVE-2024-42285	9.8 CRITICAL	RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
CVE-2024-42284	9.1 CRITICAL	tipc: Return non-zero value from tipc_udp_addr2str() on error
CVE-2024-43848	8.8 HIGH	wifi: mac80211: fix TTLM teardown work
CVE-2024-43847	8.8 HIGH	wifi: ath12k: fix invalid memory access while processing fragmented packets
CVE-2024-42287	8.8 HIGH	scsi: qla2xxx: Complete command early within lock
CVE-2024-42318	8.8 HIGH	landlock: Don't lose track of restrictions on cred_transfer
CVE-2024-42296	7.8 HIGH	f2fs: fix return value of f2fs_convert_inline_inode()
CVE-2024-42288	7.8 HIGH	scsi: qla2xxx: Fix for possible memory corruption
CVE-2024-43846	7.8 HIGH	lib: objagg: Fix general protection fault
CVE-2024-43845	7.8 HIGH	udf: Fix bogus checksum computation in udf_rename()
CVE-2024-42293	7.8 HIGH	arm64: mm: Fix lockless walks with static and dynamic page-table folding
CVE-2024-43830	7.8 HIGH	leds: trigger: Unregister sysfs attributes before calling deactivate()
CVE-2024-42300	7.8 HIGH	erofs: fix race in z_erofs_get_gbuf()
CVE-2024-42313	7.8 HIGH	media: venus: fix use after free in vdec_close
CVE-2024-42306	7.8 HIGH	udf: Avoid using corrupted block bitmap buffer
CVE-2024-42304	7.8 HIGH	ext4: make sure the first directory block is not a hole
CVE-2024-42314	7.8 HIGH	btrfs: fix extent map use-after-free when adding pages to compressed bio
CVE-2024-42301	7.8 HIGH	dev/parport: fix the array out-of-bounds risk
CVE-2024-43840	7.8 HIGH	bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
CVE-2024-43832	7.8 HIGH	s390/uv: Don't call folio_wait_writeback() without a folio reference

Showing top 20 of 109 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Linux

Same vendor: Linux

V. Comments for CVE-2023-52889

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2023-52889— apparmor: Fix null pointer deref when receiving skb during sock creation

Quick assessment

Possible ATT&CK Techniques 1 AI

Affected Version Matrix 16

I. Basic Information for CVE-2023-52889

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2023-52889

III. Intelligence Information for CVE-2023-52889

Other References for CVE-2023-52889 (6)

Same Patch Batch · Linux · 2024-08-17 · 109 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2023-52889

Leave a comment