What’s Vulnerable › Vulnerabilities

CVE-2023-52573: net: rds: Fix possible NULL-pointer dereference

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-02 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: net: rds: Fix possible NULL-pointer dereference In rds_rdma_cm_event_handler_cmn() check, if conn pointer exists before dereferencing it as rdma_set_service_type() argument Found by Linux Verification Center (linuxtesting.org) with SVACE.

Affected products

• Linux kernel: from 5.1 before 5.4.258; from 5.5 before 5.10.198; from 5.11 before 5.15.134; from 5.16 before 6.1.56; from 6.2 before 6.5.6; 6.6-rc1, 6.6-rc2 — fixed in 5.10.198, 5.15.134, 5.4.258, 6.1.56, 6.5.6

How to fix

Upgrade to a fixed version: Linux kernel 5.10.198, 5.15.134, 5.4.258, 6.1.56. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/069ac51c37a6f07a51f7134d8c34289075786a35
• https://git.kernel.org/stable/c/51fa66024a5eabf270164f2dc82a48ffb35a12e9
• https://git.kernel.org/stable/c/812da2a08dc5cc75fb71e29083ea20904510ac7a
• https://git.kernel.org/stable/c/ea82139e6e3561100d38d14401d57c0ea93fc07e
• https://git.kernel.org/stable/c/f1d95df0f31048f1c59092648997686e3f7d9478
• https://git.kernel.org/stable/c/f515112e833791001aaa8ab886af3ca78503617f
• https://git.kernel.org/stable/c/069ac51c37a6f07a51f7134d8c34289075786a35
• https://git.kernel.org/stable/c/51fa66024a5eabf270164f2dc82a48ffb35a12e9
• https://git.kernel.org/stable/c/812da2a08dc5cc75fb71e29083ea20904510ac7a
• https://git.kernel.org/stable/c/ea82139e6e3561100d38d14401d57c0ea93fc07e
• https://git.kernel.org/stable/c/f1d95df0f31048f1c59092648997686e3f7d9478
• https://git.kernel.org/stable/c/f515112e833791001aaa8ab886af3ca78503617f

Get alerted when CVE-2023-52573 or the next vulnerability affects your stack