CVE-2023-52924— Linux kernel 安全漏洞
一分钟漏洞结论
影响对象
Linux Linux
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于遍历过期元素时的逻辑错误。攻击者利用该漏洞可以导致内存泄漏或拒绝服务。
可能的 ATT&CK 技术 2 AI
T1543 · Create or Modify System Process T1190 · Exploit Public-Facing Application影响版本矩阵 16
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Linux | Linux | 9d0982927e79049675cb6c6c04a0ebb3dad5a434< 94313a196b44184b5b52c1876da6a537701b425a |
affected |
9d0982927e79049675cb6c6c04a0ebb3dad5a434< 1da4874d05da1526b11b82fc7f3c7ac38749ddf8 |
affected | ||
9d0982927e79049675cb6c6c04a0ebb3dad5a434< b15ea4017af82011dd55225ce77cce3d4dfc169c |
affected | ||
9d0982927e79049675cb6c6c04a0ebb3dad5a434< 7c7e658a36f8b1522bd3586d8137e5f93a25ddc5 |
affected | ||
9d0982927e79049675cb6c6c04a0ebb3dad5a434< 59dab3bf0b8fc08eb802721c0532f13dd89209b8 |
affected | ||
9d0982927e79049675cb6c6c04a0ebb3dad5a434< bd156ce9553dcaf2d6ee2c825d1a5a1718e86524 |
affected | ||
9d0982927e79049675cb6c6c04a0ebb3dad5a434< 24138933b97b055d486e8064b4a1721702442a9b |
affected | ||
4.1 |
affected | ||
| … +8 条更多 | |||
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2023-52924 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
netfilter: nf_tables: don't skip expired elements during walk
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_tables: don't skip expired elements during walk
There is an asymmetry between commit/abort and preparation phase if the
following conditions are met:
1. set is a verdict map ("1.2.3.4 : jump foo")
2. timeouts are enabled
In this case, following sequence is problematic:
1. element E in set S refers to chain C
2. userspace requests removal of set S
3. kernel does a set walk to decrement chain->use count for all elements
from preparation phase
4. kernel does another set walk to remove elements from the commit phase
(or another walk to do a chain->use increment for all elements from
abort phase)
If E has already expired in 1), it will be ignored during list walk, so its use count
won't have been changed.
Then, when set is culled, ->destroy callback will zap the element via
nf_tables_set_elem_destroy(), but this function is only safe for
elements that have been deactivated earlier from the preparation phase:
lack of earlier deactivate removes the element but leaks the chain use
count, which results in a WARN splat when the chain gets removed later,
plus a leak of the nft_chain structure.
Update pipapo_get() not to skip expired elements, otherwise flush
command reports bogus ENOENT errors.
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于遍历过期元素时的逻辑错误。攻击者利用该漏洞可以导致内存泄漏或拒绝服务。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
二、漏洞 CVE-2023-52924 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2023-52924 的情报信息
请登录查看更多情报信息。
CVE-2023-52924 补丁与修复 (7)
IV. Related Vulnerabilities
V. Comments for CVE-2023-52924
暂无评论