What’s Vulnerable › Vulnerabilities

CVE-2023-52524: net: nfc: llcp: Add lock when modifying device list

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-02 · updated 2026-06-17
• Weakness: CWE-667

Description

In the Linux kernel, the following vulnerability has been resolved: net: nfc: llcp: Add lock when modifying device list The device list needs its associated lock held when modifying it, or the list could become corrupted, as syzbot discovered.

Affected products

• Linux kernel: from 5.4.251 before 5.4.258; from 5.10.188 before 5.10.198; from 5.15.121 before 5.15.135; from 6.1.39 before 6.1.57; from 6.5 before 6.5.7; 6.6-rc1, 6.6-rc2, 6.6-rc3, 6.6-rc4 — fixed in 5.10.198, 5.15.135, 5.4.258, 6.1.57, 6.5.7

How to fix

Upgrade to a fixed version: Linux kernel 5.10.198, 5.15.135, 5.4.258, 6.1.57. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/191d87a19cf1005ecf41e1ae08d74e17379e8391
• https://git.kernel.org/stable/c/29c16c2bf5866326d5fbc4a537b3997fcac23391
• https://git.kernel.org/stable/c/4837a192f6d06d5bb2f3f47d6ce5353ab69bf86b
• https://git.kernel.org/stable/c/7562780e32b84196731d57dd24563546fcf6d082
• https://git.kernel.org/stable/c/dba849cc98113b145c6e720122942c00b8012bdb
• https://git.kernel.org/stable/c/dfc7f7a988dad34c3bf4c053124fb26aa6c5f916
• https://git.kernel.org/stable/c/191d87a19cf1005ecf41e1ae08d74e17379e8391
• https://git.kernel.org/stable/c/29c16c2bf5866326d5fbc4a537b3997fcac23391
• https://git.kernel.org/stable/c/4837a192f6d06d5bb2f3f47d6ce5353ab69bf86b
• https://git.kernel.org/stable/c/7562780e32b84196731d57dd24563546fcf6d082
• https://git.kernel.org/stable/c/dba849cc98113b145c6e720122942c00b8012bdb
• https://git.kernel.org/stable/c/dfc7f7a988dad34c3bf4c053124fb26aa6c5f916

Get alerted when CVE-2023-52524 or the next vulnerability affects your stack