[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2023-52881":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T08:53:30.047Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":18,"aliases":19,"duplicate_of":9,"upstream":20,"downstream":21,"duplicates":110,"related":111,"reserved_at":9,"published_at":147,"modified_at":148,"state":149,"summary":150,"references_raw":159,"kevs":194,"epss":195,"epss_history":198,"metrics":443,"affected":449},"CVE-2023-52881","In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: do not accept ACK of bytes we never sent\n\nThis patch is based on a detailed report and ideas from Yepeng Pan\nand Christian Rossow.\n\nACK seq validation is currently following RFC 5961 5.2 guidelines:\n\n   The ACK value is considered acceptable only if\n   it is in the range of ((SND.UNA - MAX.SND.WND) \u003C= SEG.ACK \u003C=\n   SND.NXT).  All incoming segments whose ACK value doesn't satisfy the\n   above condition MUST be discarded and an ACK sent back.  It needs to\n   be noted that RFC 793 on page 72 (fifth check) says: \"If the ACK is a\n   duplicate (SEG.ACK \u003C SND.UNA), it can be ignored.  If the ACK\n   acknowledges something not yet sent (SEG.ACK > SND.NXT) then send an\n   ACK, drop the segment, and return\".  The \"ignored\" above implies that\n   the processing of the incoming data segment continues, which means\n   the ACK value is treated as acceptable.  This mitigation makes the\n   ACK check more stringent since any ACK \u003C SND.UNA wouldn't be\n   accepted, instead only ACKs that are in the range ((SND.UNA -\n   MAX.SND.WND) \u003C= SEG.ACK \u003C= SND.NXT) get through.\n\nThis can be refined for new (and possibly spoofed) flows,\nby not accepting ACK for bytes that were never sent.\n\nThis greatly improves TCP security at a little cost.\n\nI added a Fixes: tag to make sure this patch will reach stable trees,\neven if the 'blamed' patch was adhering to the RFC.\n\ntp->bytes_acked was added in linux-4.2\n\nFollowing packetdrill test (courtesy of Yepeng Pan) shows\nthe issue at hand:\n\n0 socket(..., SOCK_STREAM, IPPROTO_TCP) = 3\n+0 setsockopt(3, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0\n+0 bind(3, ..., ...) = 0\n+0 listen(3, 1024) = 0\n\n// ---------------- Handshake ------------------- //\n\n// when window scale is set to 14 the window size can be extended to\n// 65535 * (2^14) = 1073725440. Linux would accept an ACK packet\n// with ack number in (Server_ISN+1-1073725440. Server_ISN+1)\n// ,though this ack number acknowledges some data never\n// sent by the server.\n\n+0 \u003C S 0:0(0) win 65535 \u003Cmss 1400,nop,wscale 14>\n+0 > S. 0:0(0) ack 1 \u003C...>\n+0 \u003C . 1:1(0) ack 1 win 65535\n+0 accept(3, ..., ...) = 4\n\n// For the established connection, we send an ACK packet,\n// the ack packet uses ack number 1 - 1073725300 + 2^32,\n// where 2^32 is used to wrap around.\n// Note: we used 1073725300 instead of 1073725440 to avoid possible\n// edge cases.\n// 1 - 1073725300 + 2^32 = 3221241997\n\n// Oops, old kernels happily accept this packet.\n+0 \u003C . 1:1001(1000) ack 3221241997 win 65535\n\n// After the kernel fix the following will be replaced by a challenge ACK,\n// and prior malicious frame would be dropped.\n+0 > . 1:1(0) ack 1001",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":9,"likelihood_of_exploit":9,"capec":17},"NVD-CWE-NOINFO","Insufficient Information","NVD uses this CWE ID when there is insufficient information to assign a specific CWE.","placeholder","NVD-Reserved",[],[],[],[],[22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106,108],{"_key":23},"SUSE-SU-2024:2571-1",{"_key":25},"SUSE-SU-2024:2360-1",{"_key":27},"SUSE-SU-2024:2362-1",{"_key":29},"SUSE-SU-2024:2365-1",{"_key":31},"SUSE-SU-2024:2381-1",{"_key":33},"SUSE-SU-2024:2384-1",{"_key":35},"SUSE-SU-2024:2385-1",{"_key":37},"SUSE-SU-2024:2495-1",{"_key":39},"SUSE-SU-2024:2561-1",{"_key":41},"SUSE-SU-2024:2895-1",{"_key":43},"SUSE-SU-2024:4081-1",{"_key":45},"SUSE-SU-2024:4082-1",{"_key":47},"SUSE-SU-2024:4100-1",{"_key":49},"SUSE-SU-2024:4103-1",{"_key":51},"SUSE-SU-2024:4131-1",{"_key":53},"SUSE-SU-2024:4140-1",{"_key":55},"SUSE-SU-2024:4364-1",{"_key":57},"SUSE-SU-2024:4387-1",{"_key":59},"SUSE-SU-2025:0034-1",{"_key":61},"SUSE-SU-2024:2372-1",{"_key":63},"SUSE-SU-2024:2394-1",{"_key":65},"SUSE-SU-2024:2896-1",{"_key":67},"SUSE-SU-2024:2939-1",{"_key":69},"SUSE-SU-2024:2973-1",{"_key":71},"SUSE-SU-2024:3983-1",{"_key":73},"SUSE-SU-2024:3984-1",{"_key":75},"SUSE-SU-2024:3985-1",{"_key":77},"SUSE-SU-2024:3986-1",{"_key":79},"SUSE-SU-2024:4318-1",{"_key":81},"SUSE-SU-2025:20008-1",{"_key":83},"SUSE-SU-2025:20028-1",{"_key":85},"SUSE-SU-2025:20163-1",{"_key":87},"SUSE-SU-2025:20164-1",{"_key":89},"SUSE-SU-2025:20246-1",{"_key":91},"SUSE-SU-2025:20247-1",{"_key":93},"DEBIAN-CVE-2023-52881",{"_key":95},"RHSA-2024:10772",{"_key":97},"RHSA-2024:10773",{"_key":99},"RHSA-2024:5281",{"_key":101},"RHSA-2024:6206",{"_key":103},"RHSA-2024:2394",{"_key":105},"RHSA-2024:4211",{"_key":107},"RHSA-2024:4352",{"_key":109},"UBUNTU-CVE-2023-52881",[],[112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146],{"_key":23},{"_key":25},{"_key":27},{"_key":29},{"_key":31},{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":47},{"_key":49},{"_key":51},{"_key":53},{"_key":55},{"_key":57},{"_key":59},{"_key":61},{"_key":63},{"_key":65},{"_key":67},{"_key":69},{"_key":71},{"_key":73},{"_key":75},{"_key":77},{"_key":79},{"_key":81},{"_key":83},{"_key":85},{"_key":87},{"_key":89},{"_key":91},"2024-05-29T10:15:14.186Z","2026-05-23T15:27:28.074Z","Analyzed",{"cisa_kev":151,"cisa_ransomware":151,"cisa_vendor":9,"epss_severity":152,"epss_score":153,"severity":154,"severity_score":155,"severity_version":156,"severity_source":157,"severity_vector":158,"severity_status":149},false,"low",0.00012,"medium",5.5,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",[160,166,170,174,178,182,186,190],{"url":161,"sources":162,"tags":164},"https://git.kernel.org/stable/c/69eae75ca5255e876628ac5cee9eaab31f644b57",[163,157],"cve.org",[165],"Patch",{"url":167,"sources":168,"tags":169},"https://git.kernel.org/stable/c/458f07ffeccd17f99942311e09ef574ddf4a414a",[163,157],[165],{"url":171,"sources":172,"tags":173},"https://git.kernel.org/stable/c/7ffff0cc929fdfc62a74b384c4903d6496c910f0",[163,157],[165],{"url":175,"sources":176,"tags":177},"https://git.kernel.org/stable/c/b17a886ed29f3b70b78ccf632dad03e0c69e3c1a",[163,157],[165],{"url":179,"sources":180,"tags":181},"https://git.kernel.org/stable/c/0d4e0afdd6658cd21dd5be61880411a2553fd1fc",[163,157],[165],{"url":183,"sources":184,"tags":185},"https://git.kernel.org/stable/c/008b807fe487e0b15a3a6c39add4eb477f73e440",[163,157],[165],{"url":187,"sources":188,"tags":189},"https://git.kernel.org/stable/c/2087d53a66e97a5eb5d1bf558d5bef9e5f891757",[163,157],[165],{"url":191,"sources":192,"tags":193},"https://git.kernel.org/stable/c/3d501dd326fb1c73f1b8206d4c6e1d7b15c07e27",[163,157],[165],[],{"date":196,"score":153,"percentile":197},"2026-06-03",0.01657,[199,202,205,208,211,214,216,219,222,225,228,231,234,237,240,244,247,250,253,256,259,262,265,268,271,274,277,279,282,285,288,291,294,297,299,302,304,306,309,311,314,317,319,321,323,326,328,331,334,336,338,340,342,345,348,351,354,356,358,361,364,367,370,372,374,376,379,381,384,386,389,391,393,396,399,402,405,408,411,413,416,418,421,423,425,428,431,434,437,440],{"date":200,"score":153,"percentile":201},"2025-11-04",0.01053,{"date":203,"score":153,"percentile":204},"2025-11-05",0.01068,{"date":206,"score":153,"percentile":207},"2025-11-06",0.01079,{"date":209,"score":153,"percentile":210},"2025-11-07",0.01082,{"date":212,"score":153,"percentile":213},"2025-11-08",0.01084,{"date":215,"score":153,"percentile":210},"2025-11-09",{"date":217,"score":153,"percentile":218},"2025-11-10",0.01072,{"date":220,"score":153,"percentile":221},"2025-11-11",0.01075,{"date":223,"score":153,"percentile":224},"2025-11-12",0.01074,{"date":226,"score":153,"percentile":227},"2025-11-13",0.01077,{"date":229,"score":153,"percentile":230},"2025-11-14",0.01092,{"date":232,"score":153,"percentile":233},"2025-11-15",0.01107,{"date":235,"score":153,"percentile":236},"2025-11-16",0.01106,{"date":238,"score":153,"percentile":239},"2025-11-17",0.011,{"date":241,"score":242,"percentile":243},"2025-11-18",0.0009,0.21821,{"date":245,"score":242,"percentile":246},"2025-11-19",0.21833,{"date":248,"score":242,"percentile":249},"2025-11-20",0.21842,{"date":251,"score":153,"percentile":252},"2025-11-21",0.01151,{"date":254,"score":153,"percentile":255},"2025-11-22",0.01148,{"date":257,"score":153,"percentile":258},"2025-11-23",0.01138,{"date":260,"score":153,"percentile":261},"2025-11-24",0.01133,{"date":263,"score":153,"percentile":264},"2025-11-25",0.01126,{"date":266,"score":153,"percentile":267},"2025-11-26",0.01061,{"date":269,"score":153,"percentile":270},"2025-11-27",0.01059,{"date":272,"score":153,"percentile":273},"2025-11-28",0.01065,{"date":275,"score":153,"percentile":276},"2025-11-29",0.01098,{"date":278,"score":153,"percentile":236},"2025-11-30",{"date":280,"score":153,"percentile":281},"2025-12-01",0.0114,{"date":283,"score":153,"percentile":284},"2025-12-02",0.01134,{"date":286,"score":153,"percentile":287},"2025-12-03",0.01139,{"date":289,"score":153,"percentile":290},"2025-12-04",0.01108,{"date":292,"score":153,"percentile":293},"2025-12-05",0.01121,{"date":295,"score":153,"percentile":296},"2025-12-06",0.01122,{"date":298,"score":153,"percentile":296},"2025-12-07",{"date":300,"score":153,"percentile":301},"2025-12-08",0.01125,{"date":303,"score":153,"percentile":258},"2025-12-09",{"date":305,"score":153,"percentile":252},"2025-12-10",{"date":307,"score":153,"percentile":308},"2025-12-11",0.01143,{"date":310,"score":153,"percentile":281},"2025-12-12",{"date":312,"score":153,"percentile":313},"2025-12-13",0.01127,{"date":315,"score":153,"percentile":316},"2025-12-14",0.01124,{"date":318,"score":153,"percentile":293},"2025-12-15",{"date":320,"score":153,"percentile":301},"2025-12-16",{"date":322,"score":153,"percentile":313},"2025-12-17",{"date":324,"score":153,"percentile":325},"2025-12-18",0.0112,{"date":327,"score":153,"percentile":301},"2025-12-19",{"date":329,"score":153,"percentile":330},"2025-12-20",0.01123,{"date":332,"score":153,"percentile":333},"2025-12-21",0.01132,{"date":335,"score":153,"percentile":261},"2025-12-22",{"date":337,"score":153,"percentile":333},"2025-12-23",{"date":339,"score":153,"percentile":284},"2025-12-24",{"date":341,"score":153,"percentile":258},"2025-12-25",{"date":343,"score":153,"percentile":344},"2025-12-26",0.01141,{"date":346,"score":153,"percentile":347},"2025-12-27",0.01142,{"date":349,"score":153,"percentile":350},"2025-12-28",0.01137,{"date":352,"score":153,"percentile":353},"2025-12-29",0.0113,{"date":355,"score":153,"percentile":264},"2025-12-30",{"date":357,"score":153,"percentile":264},"2025-12-31",{"date":359,"score":153,"percentile":360},"2026-01-01",0.01154,{"date":362,"score":153,"percentile":363},"2026-01-02",0.0115,{"date":365,"score":153,"percentile":366},"2026-01-03",0.01153,{"date":368,"score":153,"percentile":369},"2026-01-04",0.01117,{"date":371,"score":153,"percentile":316},"2026-01-05",{"date":373,"score":153,"percentile":325},"2026-01-06",{"date":375,"score":153,"percentile":325},"2026-01-07",{"date":377,"score":153,"percentile":378},"2026-01-08",0.01131,{"date":380,"score":153,"percentile":255},"2026-01-09",{"date":382,"score":153,"percentile":383},"2026-01-10",0.01156,{"date":385,"score":153,"percentile":366},"2026-01-11",{"date":387,"score":153,"percentile":388},"2026-01-12",0.01159,{"date":390,"score":153,"percentile":383},"2026-01-13",{"date":392,"score":153,"percentile":366},"2026-01-14",{"date":394,"score":153,"percentile":395},"2026-01-15",0.01166,{"date":397,"score":153,"percentile":398},"2026-01-16",0.01171,{"date":400,"score":153,"percentile":401},"2026-01-17",0.01173,{"date":403,"score":153,"percentile":404},"2026-01-18",0.01186,{"date":406,"score":153,"percentile":407},"2026-01-19",0.01183,{"date":409,"score":153,"percentile":410},"2026-01-20",0.01169,{"date":412,"score":153,"percentile":395},"2026-01-21",{"date":414,"score":153,"percentile":415},"2026-01-22",0.01168,{"date":417,"score":153,"percentile":407},"2026-01-23",{"date":419,"score":153,"percentile":420},"2026-01-24",0.01184,{"date":422,"score":153,"percentile":420},"2026-01-25",{"date":424,"score":153,"percentile":407},"2026-01-26",{"date":426,"score":153,"percentile":427},"2026-01-27",0.01174,{"date":429,"score":153,"percentile":430},"2026-01-28",0.01172,{"date":432,"score":153,"percentile":433},"2026-01-29",0.01178,{"date":435,"score":153,"percentile":436},"2026-01-30",0.01181,{"date":438,"score":153,"percentile":439},"2026-01-31",0.01197,{"date":441,"score":153,"percentile":442},"2026-02-01",0.01226,[444],{"source":157,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":445,"cvss_v4_0":9},{"baseScore":155,"baseSeverity":446,"vectorString":158,"impactScore":447,"exploitabilityScore":448},"MEDIUM",6,4.6,[450,503],{"ecosystem":9,"name":451,"vendor":452,"product":452,"cpe_part":453,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":454},"Linux","linux","a",[455,462,465,468,471,474,477,480,483,485,487,489,493,497,501],{"version":456,"is_range":457,"range_type":163,"version_start":458,"version_start_type":459,"version_end":460,"version_end_type":461,"fixed_in":9},">= 354e4aa391ed50a4d827ff6fc11e0667d0859b25, \u003C 69eae75ca5255e876628ac5cee9eaab31f644b57",true,"354e4aa391ed50a4d827ff6fc11e0667d0859b25","including","69eae75ca5255e876628ac5cee9eaab31f644b57","excluding",{"version":463,"is_range":457,"range_type":163,"version_start":458,"version_start_type":459,"version_end":464,"version_end_type":461,"fixed_in":9},">= 354e4aa391ed50a4d827ff6fc11e0667d0859b25, \u003C 458f07ffeccd17f99942311e09ef574ddf4a414a","458f07ffeccd17f99942311e09ef574ddf4a414a",{"version":466,"is_range":457,"range_type":163,"version_start":458,"version_start_type":459,"version_end":467,"version_end_type":461,"fixed_in":9},">= 354e4aa391ed50a4d827ff6fc11e0667d0859b25, \u003C 7ffff0cc929fdfc62a74b384c4903d6496c910f0","7ffff0cc929fdfc62a74b384c4903d6496c910f0",{"version":469,"is_range":457,"range_type":163,"version_start":458,"version_start_type":459,"version_end":470,"version_end_type":461,"fixed_in":9},">= 354e4aa391ed50a4d827ff6fc11e0667d0859b25, \u003C b17a886ed29f3b70b78ccf632dad03e0c69e3c1a","b17a886ed29f3b70b78ccf632dad03e0c69e3c1a",{"version":472,"is_range":457,"range_type":163,"version_start":458,"version_start_type":459,"version_end":473,"version_end_type":461,"fixed_in":9},">= 354e4aa391ed50a4d827ff6fc11e0667d0859b25, \u003C 0d4e0afdd6658cd21dd5be61880411a2553fd1fc","0d4e0afdd6658cd21dd5be61880411a2553fd1fc",{"version":475,"is_range":457,"range_type":163,"version_start":458,"version_start_type":459,"version_end":476,"version_end_type":461,"fixed_in":9},">= 354e4aa391ed50a4d827ff6fc11e0667d0859b25, \u003C 008b807fe487e0b15a3a6c39add4eb477f73e440","008b807fe487e0b15a3a6c39add4eb477f73e440",{"version":478,"is_range":457,"range_type":163,"version_start":458,"version_start_type":459,"version_end":479,"version_end_type":461,"fixed_in":9},">= 354e4aa391ed50a4d827ff6fc11e0667d0859b25, \u003C 2087d53a66e97a5eb5d1bf558d5bef9e5f891757","2087d53a66e97a5eb5d1bf558d5bef9e5f891757",{"version":481,"is_range":457,"range_type":163,"version_start":458,"version_start_type":459,"version_end":482,"version_end_type":461,"fixed_in":9},">= 354e4aa391ed50a4d827ff6fc11e0667d0859b25, \u003C 3d501dd326fb1c73f1b8206d4c6e1d7b15c07e27","3d501dd326fb1c73f1b8206d4c6e1d7b15c07e27",{"version":484,"is_range":151,"range_type":163,"version_start":484,"version_start_type":459,"version_end":484,"version_end_type":459,"fixed_in":9},"8d15569e14cfcf9151e9e3b4c0cb98369943a2bb",{"version":486,"is_range":151,"range_type":163,"version_start":486,"version_start_type":459,"version_end":486,"version_end_type":459,"fixed_in":9},"e252bbd8c87b95e9cecdc01350fbb0b46a0f9bf1",{"version":488,"is_range":151,"range_type":163,"version_start":488,"version_start_type":459,"version_end":488,"version_end_type":459,"fixed_in":9},"2ee4432e82437a7c051c254b065fbf5d4581e1a3",{"version":490,"is_range":457,"range_type":163,"version_start":491,"version_start_type":459,"version_end":492,"version_end_type":461,"fixed_in":9},">= 3.0.58, \u003C 3.1","3.0.58","3.1",{"version":494,"is_range":457,"range_type":163,"version_start":495,"version_start_type":459,"version_end":496,"version_end_type":461,"fixed_in":9},">= 3.2.37, \u003C 3.3","3.2.37","3.3",{"version":498,"is_range":457,"range_type":163,"version_start":499,"version_start_type":459,"version_end":500,"version_end_type":461,"fixed_in":9},">= 3.4.25, \u003C 3.5","3.4.25","3.5",{"version":502,"is_range":151,"range_type":163,"version_start":502,"version_start_type":459,"version_end":502,"version_end_type":459,"fixed_in":9},"3.8",{"ecosystem":9,"name":504,"vendor":452,"product":505,"cpe_part":506,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":507},"linux kernel","linux_kernel","o",[508,511,513,515,518,522,526,530,534,538,542,544,546,548],{"version":509,"is_range":457,"range_type":510,"version_start":491,"version_start_type":459,"version_end":492,"version_end_type":461,"fixed_in":9},"gte3.0.58_lt3.1","cpe",{"version":512,"is_range":457,"range_type":510,"version_start":495,"version_start_type":459,"version_end":496,"version_end_type":461,"fixed_in":9},"gte3.2.37_lt3.3",{"version":514,"is_range":457,"range_type":510,"version_start":499,"version_start_type":459,"version_end":500,"version_end_type":461,"fixed_in":9},"gte3.4.25_lt3.5",{"version":516,"is_range":457,"range_type":510,"version_start":502,"version_start_type":459,"version_end":517,"version_end_type":461,"fixed_in":9},"gte3.8_lt4.14.333","4.14.333",{"version":519,"is_range":457,"range_type":510,"version_start":520,"version_start_type":459,"version_end":521,"version_end_type":461,"fixed_in":9},"gte4.15_lt4.19.302","4.15","4.19.302",{"version":523,"is_range":457,"range_type":510,"version_start":524,"version_start_type":459,"version_end":525,"version_end_type":461,"fixed_in":9},"gte4.20_lt5.4.264","4.20","5.4.264",{"version":527,"is_range":457,"range_type":510,"version_start":528,"version_start_type":459,"version_end":529,"version_end_type":461,"fixed_in":9},"gte5.5_lt5.10.204","5.5","5.10.204",{"version":531,"is_range":457,"range_type":510,"version_start":532,"version_start_type":459,"version_end":533,"version_end_type":461,"fixed_in":9},"gte5.11_lt5.15.143","5.11","5.15.143",{"version":535,"is_range":457,"range_type":510,"version_start":536,"version_start_type":459,"version_end":537,"version_end_type":461,"fixed_in":9},"gte5.16_lt6.1.68","5.16","6.1.68",{"version":539,"is_range":457,"range_type":510,"version_start":540,"version_start_type":459,"version_end":541,"version_end_type":461,"fixed_in":9},"gte6.2_lt6.6.7","6.2","6.6.7",{"version":543,"is_range":151,"range_type":510,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.7:rc1",{"version":545,"is_range":151,"range_type":510,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.7:rc2",{"version":547,"is_range":151,"range_type":510,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.7:rc3",{"version":549,"is_range":151,"range_type":510,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.7:rc4"]