Description

In the Linux kernel, the following vulnerability has been resolved: ipv4: prevent potential spectre v1 gadget in fib_metrics_match() if (!type) continue; if (type > RTAX_MAX) return false; ... fi_val = fi->fib_metrics->metrics[type - 1]; @type being used as an array index, we need to prevent cpu speculation or risk leaking kernel memory content.

INFO

Published Date :

2025-03-27T16:43:30.547Z

Last Modified :

2025-05-04T07:47:10.247Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2023-52996 vulnerability.

Vendors Products
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2023-52996.

URL Resource
https://git.kernel.org/stable/c/5e9398a26a92fc402d82ce1f97cc67d832527da0 cve-icon cve-icon
https://git.kernel.org/stable/c/7f9828fb1f688210e681268490576f0ca65c322a cve-icon cve-icon
https://git.kernel.org/stable/c/8f0eb24f1a7a60ce635f0d757a46f1a37a4d467d cve-icon cve-icon
https://git.kernel.org/stable/c/ca3cf947760de050d558293002ad3e7f4b8745d2 cve-icon cve-icon
https://git.kernel.org/stable/c/f9753ebd61be2d957b5504cbd3fd719674f05b7a cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025032710-CVE-2023-52996-7c1f@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-52996 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-52996 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact