CVE-2023-52532
Vulnerability Summary
Timeline
Description
In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix TX CQE error handling For an unknown TX CQE error type (probably from a newer hardware), still free the SKB, update the queue tail, etc., otherwise the accounting will be wrong. Also, TX errors can be triggered by injecting corrupted packets, so replace the WARN_ONCE to ratelimited error logging.
CVSS Metrics
- v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Trends
Current EPSS score: 0.23%• Percentile: 14%
Affected Systems
- debian•linux
< 6.1.64-1 | < 6.5.8-1 | < 6.5.8-1
- ubuntu•linux
< 5.15.0-127.137
- ubuntu•linux-allwinner-5.19
all
- ubuntu•linux-aws
< 5.15.0-1073.79
- ubuntu•linux-aws-5.0
all
- ubuntu•linux-aws-5.11
all
- ubuntu•linux-aws-5.13
all
- ubuntu•linux-aws-5.15
< 5.15.0-1073.79~20.04.1
- ubuntu•linux-aws-5.19
all
- ubuntu•linux-aws-5.3
all
- ubuntu•linux-aws-5.8
all
- ubuntu•linux-aws-6.2
all
- ubuntu•linux-aws-6.5
all
- ubuntu•linux-aws-fips
all | < 5.15.0-1073.79+fips1
- ubuntu•linux-azure
all | all | < 5.15.0-1078.87
- ubuntu•linux-azure-5.11
all
- ubuntu•linux-azure-5.13
all
- ubuntu•linux-azure-5.15
< 5.15.0-1078.87~20.04.1
- ubuntu•linux-azure-5.19
all
- ubuntu•linux-azure-5.3
all
- ubuntu•linux-azure-5.4
all
- ubuntu•linux-azure-5.8
all
- ubuntu•linux-azure-6.2
all
- ubuntu•linux-azure-6.5
all
- ubuntu•linux-azure-edge
all
- ubuntu•linux-azure-fde
all | all | all
- ubuntu•linux-azure-fde-5.19
all
- ubuntu•linux-azure-fde-6.2
all
- ubuntu•linux-azure-fde-6.8
all
- ubuntu•linux-azure-fips
all | < 5.15.0-1078.87+fips1
- ubuntu•linux-bluefield
all | < 5.15.0-1057.59
- ubuntu•linux-fips
all | < 5.15.0-127.137+fips1
- ubuntu•linux-gcp
all | < 5.15.0-1072.80
- ubuntu•linux-gcp-5.11
all
- ubuntu•linux-gcp-5.13
all
- ubuntu•linux-gcp-5.15
< 5.15.0-1072.80~20.04.1
- ubuntu•linux-gcp-5.19
all
- ubuntu•linux-gcp-5.3
all
- ubuntu•linux-gcp-5.8
all
- ubuntu•linux-gcp-6.2
all
- ubuntu•linux-gcp-6.5
all
- ubuntu•linux-gcp-fips
all | < 5.15.0-1072.80+fips1
- ubuntu•linux-gke
all | < 5.15.0-1070.76
- ubuntu•linux-gke-4.15
all
- ubuntu•linux-gke-5.15
all
- ubuntu•linux-gke-5.4
all
- ubuntu•linux-gkeop
< 5.15.0-1056.63
- ubuntu•linux-gkeop-5.15
all
- ubuntu•linux-gkeop-5.4
all
- ubuntu•linux-hwe
all
Showing first 50 affected entries in server-rendered view.
References (14)
- https://git.kernel.org/stable/c/b67d7b1bfc46d05c1a58b172516454698e8d5004
- https://git.kernel.org/stable/c/a910e0f6304726da30a212feecec65cb97ff7a80
- https://git.kernel.org/stable/c/b2b000069a4c307b09548dc2243f31f3ca0eac9c
- https://ubuntu.com/security/CVE-2023-52532
- https://git.kernel.org/linus/b2b000069a4c307b09548dc2243f31f3ca0eac9c
- https://www.cve.org/CVERecord?id=CVE-2023-52532
- https://ubuntu.com/security/notices/USN-7166-1
- https://ubuntu.com/security/notices/USN-7166-2
- https://ubuntu.com/security/notices/USN-7166-3
- https://ubuntu.com/security/notices/USN-7186-1
- https://ubuntu.com/security/notices/USN-7186-2
- https://ubuntu.com/security/notices/USN-7194-1
- https://ubuntu.com/security/notices/USN-7166-4
- https://security-tracker.debian.org/tracker/CVE-2023-52532