CVE-2023-52702 - Vulnerability Details - OpenCVE

ReportizFlow

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix possible memory leak in ovs_meter_cmd_set() old_meter needs to be free after it is detached regardless of whether the new meter is successfully attached.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/1563e998a938f095548054ef09e277b562b79536
https://git.kernel.org/stable/c/2fa28f5c6fcbfc794340684f36d2581b4f2d20b5
https://git.kernel.org/stable/c/c0f65ee0a3329eb4b94beaef0268633696e2d0c6
https://git.kernel.org/stable/c/e336a9e08618203a456fb5367f1387b14554f55e
https://lore.kernel.org/linux-cve-announce/2024052156-CVE-2023-52702-ebca@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-52702
https://www.cve.org/CVERecord?id=CVE-2023-52702

History

No history.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-21T15:22:52.017Z

Updated: 2024-12-19T08:24:26.579Z

Reserved: 2024-03-07T14:49:46.891Z

Link: CVE-2023-52702

Vulnrichment

Updated: 2024-08-02T23:11:35.071Z

NVD

Status : Awaiting Analysis

Published: 2024-05-21T16:15:12.617

Modified: 2024-11-21T08:40:23.813

Link: CVE-2023-52702

Redhat

Severity : Moderate

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2023-52702 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-52702", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-03-07T14:49:46.891Z", "datePublished": "2024-05-21T15:22:52.017Z", "dateUpdated": "2024-12-19T08:24:26.579Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-12-19T08:24:26.579Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: openvswitch: fix possible memory leak in ovs_meter_cmd_set()\n\nold_meter needs to be free after it is detached regardless of whether\nthe new meter is successfully attached."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/openvswitch/meter.c"], "versions": [{"version": "c7c4c44c9a95d87e50ced38f7480e779cb472174", "lessThan": "c0f65ee0a3329eb4b94beaef0268633696e2d0c6", "status": "affected", "versionType": "git"}, {"version": "c7c4c44c9a95d87e50ced38f7480e779cb472174", "lessThan": "1563e998a938f095548054ef09e277b562b79536", "status": "affected", "versionType": "git"}, {"version": "c7c4c44c9a95d87e50ced38f7480e779cb472174", "lessThan": "e336a9e08618203a456fb5367f1387b14554f55e", "status": "affected", "versionType": "git"}, {"version": "c7c4c44c9a95d87e50ced38f7480e779cb472174", "lessThan": "2fa28f5c6fcbfc794340684f36d2581b4f2d20b5", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/openvswitch/meter.c"], "versions": [{"version": "5.8", "status": "affected"}, {"version": "0", "lessThan": "5.8", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.169", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.95", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.13", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/c0f65ee0a3329eb4b94beaef0268633696e2d0c6"}, {"url": "https://git.kernel.org/stable/c/1563e998a938f095548054ef09e277b562b79536"}, {"url": "https://git.kernel.org/stable/c/e336a9e08618203a456fb5367f1387b14554f55e"}, {"url": "https://git.kernel.org/stable/c/2fa28f5c6fcbfc794340684f36d2581b4f2d20b5"}], "title": "net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()", "x_generator": {"engine": "bippy-5f407fcff5a0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-06-11T19:06:04.936886Z", "id": "CVE-2023-52702", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-11T19:06:29.409Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:11:35.071Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/c0f65ee0a3329eb4b94beaef0268633696e2d0c6", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/1563e998a938f095548054ef09e277b562b79536", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/e336a9e08618203a456fb5367f1387b14554f55e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/2fa28f5c6fcbfc794340684f36d2581b4f2d20b5", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/c0f65ee0a3329eb4b94beaef0268633696e2d0c6", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/1563e998a938f095548054ef09e277b562b79536", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/e336a9e08618203a456fb5367f1387b14554f55e", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/2fa28f5c6fcbfc794340684f36d2581b4f2d20b5", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:11:35.071Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-52702", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-11T19:06:04.936886Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-11T19:06:25.839Z"}}], "cna": {"title": "net: openvswitch: fix possible memory leak in ovs_meter_cmd_set()", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "c7c4c44c9a95d87e50ced38f7480e779cb472174", "lessThan": "c0f65ee0a3329eb4b94beaef0268633696e2d0c6", "versionType": "git"}, {"status": "affected", "version": "c7c4c44c9a95d87e50ced38f7480e779cb472174", "lessThan": "1563e998a938f095548054ef09e277b562b79536", "versionType": "git"}, {"status": "affected", "version": "c7c4c44c9a95d87e50ced38f7480e779cb472174", "lessThan": "e336a9e08618203a456fb5367f1387b14554f55e", "versionType": "git"}, {"status": "affected", "version": "c7c4c44c9a95d87e50ced38f7480e779cb472174", "lessThan": "2fa28f5c6fcbfc794340684f36d2581b4f2d20b5", "versionType": "git"}], "programFiles": ["net/openvswitch/meter.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.8"}, {"status": "unaffected", "version": "0", "lessThan": "5.8", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.169", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.95", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.13", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["net/openvswitch/meter.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/c0f65ee0a3329eb4b94beaef0268633696e2d0c6"}, {"url": "https://git.kernel.org/stable/c/1563e998a938f095548054ef09e277b562b79536"}, {"url": "https://git.kernel.org/stable/c/e336a9e08618203a456fb5367f1387b14554f55e"}, {"url": "https://git.kernel.org/stable/c/2fa28f5c6fcbfc794340684f36d2581b4f2d20b5"}], "x_generator": {"engine": "bippy-5f407fcff5a0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: openvswitch: fix possible memory leak in ovs_meter_cmd_set()\n\nold_meter needs to be free after it is detached regardless of whether\nthe new meter is successfully attached."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-12-19T08:24:26.579Z"}}}, "cveMetadata": {"cveId": "CVE-2023-52702", "state": "PUBLISHED", "dateUpdated": "2024-12-19T08:24:26.579Z", "dateReserved": "2024-03-07T14:49:46.891Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-21T15:22:52.017Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}