In the Linux kernel, the following vulnerability has been resolved:
net: nfc: llcp: Add lock when modifying device list
The device list needs its associated lock held when modifying it, or the list could become corrupted, as syzbot discovered.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52524.json",
"cna_assigner": "Linux"
}[
{
"id": "CVE-2023-52524-2ce351d2",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"209966174007055367426344949062530494627",
"24702153101649979647109527650571932657",
"41520326388183975811306957904278613641",
"316171078795366154404966814242491181818"
]
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@29c16c2bf5866326d5fbc4a537b3997fcac23391",
"signature_type": "Line",
"target": {
"file": "net/nfc/llcp_core.c"
}
},
{
"id": "CVE-2023-52524-5d61907c",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"209966174007055367426344949062530494627",
"24702153101649979647109527650571932657",
"41520326388183975811306957904278613641",
"316171078795366154404966814242491181818"
]
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7562780e32b84196731d57dd24563546fcf6d082",
"signature_type": "Line",
"target": {
"file": "net/nfc/llcp_core.c"
}
},
{
"id": "CVE-2023-52524-9d5d27b8",
"signature_version": "v1",
"digest": {
"function_hash": "328940869699858758331127750184744184136",
"length": 1142.0
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@29c16c2bf5866326d5fbc4a537b3997fcac23391",
"signature_type": "Function",
"target": {
"file": "net/nfc/llcp_core.c",
"function": "nfc_llcp_register_device"
}
},
{
"id": "CVE-2023-52524-acb161c6",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"209966174007055367426344949062530494627",
"24702153101649979647109527650571932657",
"41520326388183975811306957904278613641",
"316171078795366154404966814242491181818"
]
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@191d87a19cf1005ecf41e1ae08d74e17379e8391",
"signature_type": "Line",
"target": {
"file": "net/nfc/llcp_core.c"
}
},
{
"id": "CVE-2023-52524-b15cf8db",
"signature_version": "v1",
"digest": {
"function_hash": "328940869699858758331127750184744184136",
"length": 1142.0
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@191d87a19cf1005ecf41e1ae08d74e17379e8391",
"signature_type": "Function",
"target": {
"file": "net/nfc/llcp_core.c",
"function": "nfc_llcp_register_device"
}
},
{
"id": "CVE-2023-52524-c64bbe7c",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"209966174007055367426344949062530494627",
"24702153101649979647109527650571932657",
"41520326388183975811306957904278613641",
"316171078795366154404966814242491181818"
]
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4837a192f6d06d5bb2f3f47d6ce5353ab69bf86b",
"signature_type": "Line",
"target": {
"file": "net/nfc/llcp_core.c"
}
},
{
"id": "CVE-2023-52524-cdd5c20e",
"signature_version": "v1",
"digest": {
"function_hash": "328940869699858758331127750184744184136",
"length": 1142.0
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7562780e32b84196731d57dd24563546fcf6d082",
"signature_type": "Function",
"target": {
"file": "net/nfc/llcp_core.c",
"function": "nfc_llcp_register_device"
}
},
{
"id": "CVE-2023-52524-e1fa4455",
"signature_version": "v1",
"digest": {
"function_hash": "328940869699858758331127750184744184136",
"length": 1142.0
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4837a192f6d06d5bb2f3f47d6ce5353ab69bf86b",
"signature_type": "Function",
"target": {
"file": "net/nfc/llcp_core.c",
"function": "nfc_llcp_register_device"
}
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52524.json"