CVE-2023-52807 Affecting cluster-md-kmp-default package, versions <6.4.0-150600.23.14.2
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-SLES156-CLUSTERMDKMPDEFAULT-7549637
- published 23 Jul 2024
- disclosed 22 Jul 2024
Introduced: 22 Jul 2024
CVE-2023-52807 Open this link in a new tabHow to fix?
Upgrade SLES:15.6
cluster-md-kmp-default
to version 6.4.0-150600.23.14.2 or higher.
NVD Description
Note: Versions mentioned in the description apply only to the upstream cluster-md-kmp-default
package and not the cluster-md-kmp-default
package as distributed by SLES
.
See How to fix?
for SLES:15.6
relevant fixed versions and status.
In the Linux kernel, the following vulnerability has been resolved:
net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs
The hns3 driver define an array of string to show the coalesce info, but if the kernel adds a new mode or a new state, out-of-bounds access may occur when coalesce info is read via debugfs, this patch fix the problem.
References
- https://www.suse.com/security/cve/CVE-2023-52807.html
- https://bugzilla.suse.com/1225097
- https://git.kernel.org/stable/c/07f5b8c47152cadbd9102e053dcb60685820aa09
- https://git.kernel.org/stable/c/53aba458f23846112c0d44239580ff59bc5c36c3
- https://git.kernel.org/stable/c/be1f703f39efa27b7371b9a4cd983317f1366792
- https://git.kernel.org/stable/c/f79d985c69060047426be68b7e4c1663d5d731b4