Improper Initialization in Linux kernel - CVE-2023-52452

Vulnerability identifier: #VU87743

CSH Severity: Low

CVSS v4 BT: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52452

CWE-ID: CWE-665

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to improper initialization in bpf. A local user can run a specially crafted application to execute arbitrary code with escalated privileges on the system.

Linux kernel
openEuler
Ubuntu
kernel-tools-debuginfo
kernel
kernel-tools-devel
bpftool
bpftool-debuginfo
kernel-debugsource
kernel-headers
perf-debuginfo
kernel-source
kernel-tools
perf
kernel-devel
python3-perf-debuginfo
kernel-debuginfo
python3-perf
linux-image-virtual-hwe-22.04 (Ubuntu package)
linux-image-generic-hwe-22.04 (Ubuntu package)
linux-image-generic-64k-hwe-22.04 (Ubuntu package)
linux-image-6.5.0-41-generic-64k (Ubuntu package)
linux-image-6.5.0-41-generic (Ubuntu package)
linux-image-6.5.0-1017-laptop (Ubuntu package)
linux-image-laptop-23.10 (Ubuntu package)
linux-image-6.5.0-1021-nvidia (Ubuntu package)
linux-image-6.5.0-1021-nvidia-64k (Ubuntu package)
linux-image-nvidia-6.5 (Ubuntu package)
linux-image-nvidia-64k-6.5 (Ubuntu package)
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package)
linux-image-nvidia-hwe-22.04 (Ubuntu package)
linux-image-6.5.0-1022-oem (Ubuntu package)
linux-image-oem-22.04d (Ubuntu package)
linux-image-oem-22.04c (Ubuntu package)
linux-image-oem-22.04b (Ubuntu package)
linux-image-oem-22.04a (Ubuntu package)
linux-image-oem-22.04 (Ubuntu package)

Install updates from vendor's website.

Linux kernel - update to 6.6.14
kernel-tools-debuginfo - addressed in versions 5.10.0-60.130.0.157, 5.10.0-136.68.0.148, 5.10.0-153.47.0.125, 5.10.0-192.0.0.105
kernel - addressed in versions 5.10.0-60.130.0.157, 5.10.0-136.68.0.148, 5.10.0-153.47.0.125, 5.10.0-192.0.0.105
kernel-tools-devel - addressed in versions 5.10.0-60.130.0.157, 5.10.0-136.68.0.148, 5.10.0-153.47.0.125, 5.10.0-192.0.0.105
bpftool - update to 5.10.0-60.130.0.157
bpftool-debuginfo - update to 5.10.0-60.130.0.157
kernel-debugsource - addressed in versions 5.10.0-60.130.0.157, 5.10.0-136.68.0.148, 5.10.0-153.47.0.125, 5.10.0-192.0.0.105
kernel-headers - addressed in versions 5.10.0-60.130.0.157, 5.10.0-136.68.0.148, 5.10.0-153.47.0.125, 5.10.0-192.0.0.105
perf-debuginfo - addressed in versions 5.10.0-60.130.0.157, 5.10.0-136.68.0.148, 5.10.0-153.47.0.125, 5.10.0-192.0.0.105
kernel-source - addressed in versions 5.10.0-60.130.0.157, 5.10.0-136.68.0.148, 5.10.0-153.47.0.125, 5.10.0-192.0.0.105
kernel-tools - addressed in versions 5.10.0-60.130.0.157, 5.10.0-136.68.0.148, 5.10.0-153.47.0.125, 5.10.0-192.0.0.105
perf - addressed in versions 5.10.0-60.130.0.157, 5.10.0-136.68.0.148, 5.10.0-153.47.0.125, 5.10.0-192.0.0.105
kernel-devel - addressed in versions 5.10.0-60.130.0.157, 5.10.0-136.68.0.148, 5.10.0-153.47.0.125, 5.10.0-192.0.0.105
python3-perf-debuginfo - addressed in versions 5.10.0-60.130.0.157, 5.10.0-136.68.0.148, 5.10.0-153.47.0.125, 5.10.0-192.0.0.105
kernel-debuginfo - addressed in versions 5.10.0-60.130.0.157, 5.10.0-136.68.0.148, 5.10.0-153.47.0.125, 5.10.0-192.0.0.105
python3-perf - addressed in versions 5.10.0-60.130.0.157, 5.10.0-136.68.0.148, 5.10.0-153.47.0.125, 5.10.0-192.0.0.105
linux-image-virtual-hwe-22.04 (Ubuntu package) - update to 6.5.0.41.41~22.04.2
linux-image-generic-hwe-22.04 (Ubuntu package) - update to 6.5.0.41.41~22.04.2
linux-image-generic-64k-hwe-22.04 (Ubuntu package) - update to 6.5.0.41.41~22.04.2
linux-image-6.5.0-41-generic-64k (Ubuntu package) - update to 6.5.0-41.41~22.04.2
linux-image-6.5.0-41-generic (Ubuntu package) - update to 6.5.0-41.41~22.04.2
linux-image-6.5.0-1017-laptop (Ubuntu package) - update to 6.5.0-1017.20
linux-image-laptop-23.10 (Ubuntu package) - update to 6.5.0.1017.20
linux-image-6.5.0-1021-nvidia (Ubuntu package) - update to 6.5.0-1021.22
linux-image-6.5.0-1021-nvidia-64k (Ubuntu package) - update to 6.5.0-1021.22
linux-image-nvidia-6.5 (Ubuntu package) - update to 6.5.0.1021.29
linux-image-nvidia-64k-6.5 (Ubuntu package) - update to 6.5.0.1021.29
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package) - update to 6.5.0.1021.29
linux-image-nvidia-hwe-22.04 (Ubuntu package) - update to 6.5.0.1021.29
linux-image-6.5.0-1022-oem (Ubuntu package) - update to 6.5.0-1022.23
linux-image-oem-22.04d (Ubuntu package) - update to 6.5.0.1022.24
linux-image-oem-22.04c (Ubuntu package) - update to 6.5.0.1022.24
linux-image-oem-22.04b (Ubuntu package) - update to 6.5.0.1022.24
linux-image-oem-22.04a (Ubuntu package) - update to 6.5.0.1022.24
linux-image-oem-22.04 (Ubuntu package) - update to 6.5.0.1022.24

• https://git.kernel.org/stable/c/0954982db8283016bf38e9db2da5adf47a102e19
• https://git.kernel.org/stable/c/fbcf372c8eda2290470268e0afb5ab5d5f5d5fde
• https://git.kernel.org/stable/c/6b4a64bafd107e521c01eec3453ce94a3fb38529

• Privilege escalation in Linux kernel bpf
• openEuler 22.03 LTS update for kernel
• openEuler 22.03 LTS SP1 update for kernel
• openEuler 22.03 LTS SP2 update for kernel
• openEuler 22.03 LTS SP3 update for kernel
• Ubuntu update for linux-oem-6.5
• Ubuntu update for linux-laptop
• Ubuntu update for linux-nvidia-6.5
• Ubuntu update for linux-hwe-6.5