[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2023-52771":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T08:53:30.047Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":28,"aliases":29,"duplicate_of":9,"upstream":30,"downstream":31,"duplicates":52,"related":53,"reserved_at":9,"published_at":59,"modified_at":60,"state":61,"summary":62,"references_raw":71,"kevs":86,"epss":87,"epss_history":90,"metrics":317,"affected":328},"CVE-2023-52771","In the Linux kernel, the following vulnerability has been resolved:\n\ncxl/port: Fix delete_endpoint() vs parent unregistration race\n\nThe CXL subsystem, at cxl_mem ->probe() time, establishes a lineage of\nports (struct cxl_port objects) between an endpoint and the root of a\nCXL topology. Each port including the endpoint port is attached to the\ncxl_port driver.\n\nGiven that setup, it follows that when either any port in that lineage\ngoes through a cxl_port ->remove() event, or the memdev goes through a\ncxl_mem ->remove() event. The hierarchy below the removed port, or the\nentire hierarchy if the memdev is removed needs to come down.\n\nThe delete_endpoint() callback is careful to check whether it is being\ncalled to tear down the hierarchy, or if it is only being called to\nteardown the memdev because an ancestor port is going through\n->remove().\n\nThat care needs to take the device_lock() of the endpoint's parent.\nWhich requires 2 bugs to be fixed:\n\n1/ A reference on the parent is needed to prevent use-after-free\n   scenarios like this signature:\n\n    BUG: spinlock bad magic on CPU#0, kworker/u56:0/11\n    Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS edk2-20230524-3.fc38 05/24/2023\n    Workqueue: cxl_port detach_memdev [cxl_core]\n    RIP: 0010:spin_bug+0x65/0xa0\n    Call Trace:\n      do_raw_spin_lock+0x69/0xa0\n     __mutex_lock+0x695/0xb80\n     delete_endpoint+0xad/0x150 [cxl_core]\n     devres_release_all+0xb8/0x110\n     device_unbind_cleanup+0xe/0x70\n     device_release_driver_internal+0x1d2/0x210\n     detach_memdev+0x15/0x20 [cxl_core]\n     process_one_work+0x1e3/0x4c0\n     worker_thread+0x1dd/0x3d0\n\n2/ In the case of RCH topologies, the parent device that needs to be\n   locked is not always @port->dev as returned by cxl_mem_find_port(), use\n   endpoint->dev.parent instead.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-362","Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')","The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.","weakness","Draft","Class","Medium",[20,24],{"id":21,"name":22,"techniques":23},"CAPEC-26","Leveraging Race Conditions",[],{"id":25,"name":26,"techniques":27},"CAPEC-29","Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions",[],[],[],[],[32,34,36,38,40,42,44,46,48,50],{"_key":33},"UBUNTU-CVE-2023-52771",{"_key":35},"SUSE-SU-2024:2203-1",{"_key":37},"SUSE-SU-2024:2135-1",{"_key":39},"SUSE-SU-2024:2973-1",{"_key":41},"SUSE-SU-2025:20008-1",{"_key":43},"SUSE-SU-2025:20028-1",{"_key":45},"DEBIAN-CVE-2023-52771",{"_key":47},"RHSA-2024:5364",{"_key":49},"RHSA-2024:5365",{"_key":51},"RHSA-2024:5928",[],[54,55,56,57,58],{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},"2024-05-21T15:30:53.629Z","2026-05-11T19:32:49.370Z","Analyzed",{"cisa_kev":63,"cisa_ransomware":63,"cisa_vendor":9,"epss_severity":64,"epss_score":65,"severity":66,"severity_score":67,"severity_version":68,"severity_source":69,"severity_vector":70,"severity_status":61},false,"low",0.00009,"medium",4.7,"v3.1","nvd","CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",[72,78,82],{"url":73,"sources":74,"tags":76},"https://git.kernel.org/stable/c/37179fcc916bce8c3cc7b36d67ef814cce55142b",[75,69],"cve.org",[77],"Patch",{"url":79,"sources":80,"tags":81},"https://git.kernel.org/stable/c/6b2e428e673b3f55965674a426c40922e91388aa",[75,69],[77],{"url":83,"sources":84,"tags":85},"https://git.kernel.org/stable/c/8d2ad999ca3c64cb08cf6a58d227b9d9e746d708",[75,69],[77],[],{"date":88,"score":65,"percentile":89},"2026-06-03",0.01019,[91,95,97,100,102,105,107,109,111,113,115,117,120,122,124,128,131,134,137,139,141,143,145,147,149,151,153,155,157,160,162,165,168,171,173,175,178,181,184,187,190,192,195,198,201,203,206,208,211,213,215,218,221,224,227,229,232,235,238,240,242,244,246,248,250,252,254,256,259,261,263,266,268,271,273,275,278,280,283,286,288,291,294,297,300,303,306,308,311,314],{"date":92,"score":93,"percentile":94},"2025-11-04",0.00006,0.0024,{"date":96,"score":93,"percentile":94},"2025-11-05",{"date":98,"score":93,"percentile":99},"2025-11-06",0.00241,{"date":101,"score":93,"percentile":94},"2025-11-07",{"date":103,"score":93,"percentile":104},"2025-11-08",0.00239,{"date":106,"score":93,"percentile":104},"2025-11-09",{"date":108,"score":93,"percentile":104},"2025-11-10",{"date":110,"score":93,"percentile":94},"2025-11-11",{"date":112,"score":93,"percentile":104},"2025-11-12",{"date":114,"score":93,"percentile":104},"2025-11-13",{"date":116,"score":93,"percentile":104},"2025-11-14",{"date":118,"score":93,"percentile":119},"2025-11-15",0.00238,{"date":121,"score":93,"percentile":119},"2025-11-16",{"date":123,"score":93,"percentile":104},"2025-11-17",{"date":125,"score":126,"percentile":127},"2025-11-18",0.00055,0.12741,{"date":129,"score":126,"percentile":130},"2025-11-19",0.12762,{"date":132,"score":126,"percentile":133},"2025-11-20",0.12776,{"date":135,"score":93,"percentile":136},"2025-11-21",0.00242,{"date":138,"score":93,"percentile":136},"2025-11-22",{"date":140,"score":93,"percentile":99},"2025-11-23",{"date":142,"score":93,"percentile":99},"2025-11-24",{"date":144,"score":93,"percentile":94},"2025-11-25",{"date":146,"score":93,"percentile":94},"2025-11-26",{"date":148,"score":93,"percentile":94},"2025-11-27",{"date":150,"score":93,"percentile":94},"2025-11-28",{"date":152,"score":93,"percentile":104},"2025-11-29",{"date":154,"score":93,"percentile":104},"2025-11-30",{"date":156,"score":93,"percentile":119},"2025-12-01",{"date":158,"score":93,"percentile":159},"2025-12-02",0.00237,{"date":161,"score":93,"percentile":119},"2025-12-03",{"date":163,"score":93,"percentile":164},"2025-12-04",0.00245,{"date":166,"score":93,"percentile":167},"2025-12-05",0.00246,{"date":169,"score":93,"percentile":170},"2025-12-06",0.00244,{"date":172,"score":93,"percentile":170},"2025-12-07",{"date":174,"score":93,"percentile":167},"2025-12-08",{"date":176,"score":93,"percentile":177},"2025-12-09",0.00254,{"date":179,"score":93,"percentile":180},"2025-12-10",0.00256,{"date":182,"score":93,"percentile":183},"2025-12-11",0.00259,{"date":185,"score":93,"percentile":186},"2025-12-12",0.00263,{"date":188,"score":65,"percentile":189},"2025-12-13",0.00711,{"date":191,"score":65,"percentile":189},"2025-12-14",{"date":193,"score":65,"percentile":194},"2025-12-15",0.00706,{"date":196,"score":65,"percentile":197},"2025-12-16",0.00709,{"date":199,"score":65,"percentile":200},"2025-12-17",0.00712,{"date":202,"score":65,"percentile":200},"2025-12-18",{"date":204,"score":65,"percentile":205},"2025-12-19",0.00714,{"date":207,"score":65,"percentile":205},"2025-12-20",{"date":209,"score":65,"percentile":210},"2025-12-21",0.0071,{"date":212,"score":65,"percentile":200},"2025-12-22",{"date":214,"score":65,"percentile":200},"2025-12-23",{"date":216,"score":65,"percentile":217},"2025-12-24",0.00716,{"date":219,"score":65,"percentile":220},"2025-12-25",0.00717,{"date":222,"score":65,"percentile":223},"2025-12-26",0.00722,{"date":225,"score":65,"percentile":226},"2025-12-27",0.00718,{"date":228,"score":65,"percentile":226},"2025-12-28",{"date":230,"score":65,"percentile":231},"2025-12-29",0.00715,{"date":233,"score":65,"percentile":234},"2025-12-30",0.00713,{"date":236,"score":65,"percentile":237},"2025-12-31",0.00708,{"date":239,"score":65,"percentile":200},"2026-01-01",{"date":241,"score":65,"percentile":220},"2026-01-02",{"date":243,"score":65,"percentile":226},"2026-01-03",{"date":245,"score":65,"percentile":210},"2026-01-04",{"date":247,"score":65,"percentile":234},"2026-01-05",{"date":249,"score":65,"percentile":189},"2026-01-06",{"date":251,"score":65,"percentile":197},"2026-01-07",{"date":253,"score":65,"percentile":205},"2026-01-08",{"date":255,"score":65,"percentile":223},"2026-01-09",{"date":257,"score":65,"percentile":258},"2026-01-10",0.00724,{"date":260,"score":65,"percentile":258},"2026-01-11",{"date":262,"score":65,"percentile":223},"2026-01-12",{"date":264,"score":65,"percentile":265},"2026-01-13",0.0072,{"date":267,"score":65,"percentile":265},"2026-01-14",{"date":269,"score":65,"percentile":270},"2026-01-15",0.00723,{"date":272,"score":65,"percentile":270},"2026-01-16",{"date":274,"score":65,"percentile":270},"2026-01-17",{"date":276,"score":65,"percentile":277},"2026-01-18",0.00726,{"date":279,"score":65,"percentile":258},"2026-01-19",{"date":281,"score":65,"percentile":282},"2026-01-20",0.00721,{"date":284,"score":65,"percentile":285},"2026-01-21",0.00719,{"date":287,"score":65,"percentile":282},"2026-01-22",{"date":289,"score":65,"percentile":290},"2026-01-23",0.0073,{"date":292,"score":65,"percentile":293},"2026-01-24",0.00736,{"date":295,"score":65,"percentile":296},"2026-01-25",0.00737,{"date":298,"score":65,"percentile":299},"2026-01-26",0.00738,{"date":301,"score":65,"percentile":302},"2026-01-27",0.00741,{"date":304,"score":65,"percentile":305},"2026-01-28",0.00739,{"date":307,"score":65,"percentile":305},"2026-01-29",{"date":309,"score":65,"percentile":310},"2026-01-30",0.00749,{"date":312,"score":65,"percentile":313},"2026-01-31",0.00756,{"date":315,"score":65,"percentile":316},"2026-02-01",0.00761,[318,325],{"source":75,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":319,"cvss_v4_0":9},{"baseScore":320,"baseSeverity":321,"vectorString":322,"impactScore":323,"exploitabilityScore":324},4.4,"MEDIUM","CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",6,2.1,{"source":69,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":326,"cvss_v4_0":9},{"baseScore":67,"baseSeverity":321,"vectorString":70,"impactScore":323,"exploitabilityScore":327},2.6,[329,349],{"ecosystem":9,"name":330,"vendor":331,"product":331,"cpe_part":332,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":333},"Linux","linux","a",[334,341,344,347],{"version":335,"is_range":336,"range_type":75,"version_start":337,"version_start_type":338,"version_end":339,"version_end_type":340,"fixed_in":9},">= 8dd2bc0f8e02d39bd80851ca787bcbdb7d495e69, \u003C 37179fcc916bce8c3cc7b36d67ef814cce55142b",true,"8dd2bc0f8e02d39bd80851ca787bcbdb7d495e69","including","37179fcc916bce8c3cc7b36d67ef814cce55142b","excluding",{"version":342,"is_range":336,"range_type":75,"version_start":337,"version_start_type":338,"version_end":343,"version_end_type":340,"fixed_in":9},">= 8dd2bc0f8e02d39bd80851ca787bcbdb7d495e69, \u003C 6b2e428e673b3f55965674a426c40922e91388aa","6b2e428e673b3f55965674a426c40922e91388aa",{"version":345,"is_range":336,"range_type":75,"version_start":337,"version_start_type":338,"version_end":346,"version_end_type":340,"fixed_in":9},">= 8dd2bc0f8e02d39bd80851ca787bcbdb7d495e69, \u003C 8d2ad999ca3c64cb08cf6a58d227b9d9e746d708","8d2ad999ca3c64cb08cf6a58d227b9d9e746d708",{"version":348,"is_range":63,"range_type":75,"version_start":348,"version_start_type":338,"version_end":348,"version_end_type":338,"fixed_in":9},"5.18",{"ecosystem":9,"name":350,"vendor":331,"product":351,"cpe_part":352,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":353},"linux kernel","linux_kernel","o",[354,358],{"version":355,"is_range":336,"range_type":356,"version_start":348,"version_start_type":338,"version_end":357,"version_end_type":340,"fixed_in":9},"gte5.18_lt6.5.13","cpe","6.5.13",{"version":359,"is_range":336,"range_type":356,"version_start":360,"version_start_type":338,"version_end":361,"version_end_type":340,"fixed_in":9},"gte6.6_lt6.6.3","6.6","6.6.3"]