Improper locking in Linux kernel - CVE-2023-52638

Vulnerability identifier: #VU90796

CSH Severity: Low

CVSS v4 BT: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52638

CWE-ID: CWE-667

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the j1939_jsk_add(), j1939_sk_recv_match(), j1939_sk_recv(), j1939_sk_errqueue() and j1939_sk_netdev_event_netdown() functions in net/can/j1939/socket.c, within the j1939_netdev_start() function in net/can/j1939/main.c. A local user can perform a denial of service (DoS) attack.

Linux kernel
Debian Linux
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Slackware Linux
openEuler
Ubuntu
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
perf
kernel
bpftool
kernel-debugsource
kernel-tools
python2-perf-debuginfo
python2-perf
perf-debuginfo
kernel-tools-devel
kernel-devel
bpftool-debuginfo
python3-perf-debuginfo
kernel-debuginfo
kernel-tools-debuginfo
kernel-source
python3-perf
kernel (Red Hat package)
kernel-rt (Red Hat package)
linux-image-lowlatency-64k (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-virtual (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-oem-20.04d (Ubuntu package)
linux-image-oem-20.04c (Ubuntu package)
linux-image-oem-20.04b (Ubuntu package)
linux-image-oem-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-5.15.0-106-generic (Ubuntu package)
linux-image-5.15.0-106-lowlatency-64k (Ubuntu package)
linux-image-5.15.0-106-lowlatency (Ubuntu package)
linux-image-5.15.0-106-generic-lpae (Ubuntu package)
linux-image-5.15.0-106-generic-64k (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-gkeop-5.15 (Ubuntu package)
linux-image-5.15.0-1044-gkeop (Ubuntu package)
linux-image-ibm (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-nvidia (Ubuntu package)
linux-image-nvidia-lowlatency (Ubuntu package)
linux-image-5.15.0-1054-nvidia-lowlatency (Ubuntu package)
linux-image-5.15.0-1054-nvidia (Ubuntu package)
linux-image-5.15.0-1054-raspi (Ubuntu package)
linux-image-5.15.0-1054-ibm (Ubuntu package)
linux-image-5.15.0-1057-intel-iotg (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-gke-5.15 (Ubuntu package)
linux-image-5.15.0-1058-gke (Ubuntu package)
linux-image-5.15.0-1058-kvm (Ubuntu package)
linux-image-oracle-lts-22.04 (Ubuntu package)
linux-image-gcp-lts-22.04 (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-5.15.0-1059-oracle (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-5.15.0-1059-gcp (Ubuntu package)
linux-image-aws-lts-22.04 (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-5.15.0-1061-aws (Ubuntu package)
linux-image-azure-lts-22.04 (Ubuntu package)
linux-image-5.15.0-1063-azure-fde (Ubuntu package)
linux-image-azure-cvm (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-5.15.0-1063-azure (Ubuntu package)
linux-image-azure-fde (Ubuntu package)
linux-image-azure-fde-lts-22.04 (Ubuntu package)
linux-5.15.160/kernel-modules
linux-5.15.160/kernel-huge
linux-5.15.160/kernel-generic
linux-5.15.160/kernel-headers
linux (Debian package)
linux-image-6.5.0-44-generic-64k (Ubuntu package)
linux-image-virtual-hwe-22.04 (Ubuntu package)
linux-image-6.5.0-44-generic (Ubuntu package)
linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package)
linux-image-6.5.0-44-lowlatency (Ubuntu package)
linux-image-6.5.0-44-lowlatency-64k (Ubuntu package)
linux-image-lowlatency-hwe-22.04 (Ubuntu package)
linux-image-generic-hwe-22.04 (Ubuntu package)
linux-image-generic-64k-hwe-22.04 (Ubuntu package)
linux-image-starfive (Ubuntu package)
linux-image-6.5.0-1017-starfive (Ubuntu package)
linux-image-6.5.0-1020-raspi (Ubuntu package)
linux-image-6.5.0-1023-aws (Ubuntu package)
linux-image-6.5.0-1023-nvidia (Ubuntu package)
linux-image-6.5.0-1023-nvidia-64k (Ubuntu package)
linux-image-nvidia-hwe-22.04 (Ubuntu package)
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package)
linux-image-nvidia-64k-6.5 (Ubuntu package)
linux-image-nvidia-6.5 (Ubuntu package)
linux-image-6.5.0-1024-azure (Ubuntu package)
linux-image-6.5.0-1024-azure-fde (Ubuntu package)
linux-image-6.5.0-1024-gcp (Ubuntu package)
linux-image-6.5.0-1026-oracle (Ubuntu package)
linux-image-oracle-64k (Ubuntu package)
linux-image-6.5.0-1026-oracle-64k (Ubuntu package)
linux-image-6.5.0-1027-oem (Ubuntu package)
linux-image-oem-22.04 (Ubuntu package)
linux-image-oem-22.04a (Ubuntu package)
linux-image-oem-22.04b (Ubuntu package)
linux-image-oem-22.04c (Ubuntu package)
linux-image-oem-22.04d (Ubuntu package)
IBM API Connect
Red Hat OpenShift Container Platform
linux-image-intel-iotg (Ubuntu package)
IBM Security Guardium
Guardium Data Protection

Install update from vendor's website.

Linux kernel - addressed in versions 5.15.149, 6.1.79, 6.6.18, 6.7.6, 6.8
IBM API Connect - update to 10.0.8.2 ifix2
Red Hat OpenShift Container Platform - addressed in versions 4.12.61, 4.13.45
perf - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276
kernel - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276
bpftool - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276
kernel-debugsource - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276
kernel-tools - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276
python2-perf-debuginfo - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276
python2-perf - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276
perf-debuginfo - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276
kernel-tools-devel - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276
kernel-devel - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276
bpftool-debuginfo - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276
python3-perf-debuginfo - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276
kernel-debuginfo - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276
kernel-tools-debuginfo - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276
kernel-source - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276
python3-perf - addressed in versions 4.19.90-2405.3.0.0249, 4.19.90-2405.3.0.0276
kernel (Red Hat package) - addressed in versions 5.14.0-70.161.1.el9_0, 5.14.0-284.73.1.el9_2, 5.14.0-427.26.1.el9_4
kernel-rt (Red Hat package) - update to 5.14.0-70.161.1.rt21.233.el9_0
linux-image-lowlatency-64k (Ubuntu package) - update to 5.15.0.106.101
linux-image-lowlatency (Ubuntu package) - update to 5.15.0.106.101
linux-image-virtual (Ubuntu package) - addressed in versions 5.15.0.106.106, 6.5.0.44.44
linux-image-generic-lpae (Ubuntu package) - addressed in versions 5.15.0.106.106, 6.5.0.44.44
linux-image-generic-64k (Ubuntu package) - addressed in versions 5.15.0.106.106, 6.5.0.44.44
linux-image-generic (Ubuntu package) - addressed in versions 5.15.0.106.106, 6.5.0.44.44
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.15.0.106.116~20.04.1
linux-image-oem-20.04d (Ubuntu package) - update to 5.15.0.106.116~20.04.1
linux-image-oem-20.04c (Ubuntu package) - update to 5.15.0.106.116~20.04.1
linux-image-oem-20.04b (Ubuntu package) - update to 5.15.0.106.116~20.04.1
linux-image-oem-20.04 (Ubuntu package) - update to 5.15.0.106.116~20.04.1
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.15.0.106.116~20.04.1
linux-image-lowlatency-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.106.116~20.04.1
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.15.0.106.116~20.04.1
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.15.0.106.116~20.04.1
linux-image-5.15.0-106-generic (Ubuntu package) - update to 5.15.0-106.116~20.04.1
linux-image-5.15.0-106-lowlatency-64k (Ubuntu package) - update to 5.15.0-106.116~20.04.1
linux-image-5.15.0-106-lowlatency (Ubuntu package) - update to 5.15.0-106.116~20.04.1
linux-image-5.15.0-106-generic-lpae (Ubuntu package) - update to 5.15.0-106.116~20.04.1
linux-image-5.15.0-106-generic-64k (Ubuntu package) - update to 5.15.0-106.116~20.04.1
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.15.0.106.116~20.04.1
linux-image-gkeop (Ubuntu package) - update to 5.15.0.1044.43
linux-image-gkeop-5.15 (Ubuntu package) - addressed in versions 5.15.0.1044.43, 5.15.0.1044.51~20.04.1
linux-image-5.15.0-1044-gkeop (Ubuntu package) - update to 5.15.0-1044.51~20.04.1
linux-image-ibm (Ubuntu package) - addressed in versions 5.15.0.1054.50, 5.15.0.1054.57~20.04.1
linux-image-raspi-nolpae (Ubuntu package) - addressed in versions 5.15.0.1054.52, 6.5.0.1020.21
linux-image-raspi (Ubuntu package) - addressed in versions 5.15.0.1054.52, 6.5.0.1020.21
linux-image-nvidia (Ubuntu package) - update to 5.15.0.1054.54
linux-image-nvidia-lowlatency (Ubuntu package) - update to 5.15.0.1054.54
linux-image-5.15.0-1054-nvidia-lowlatency (Ubuntu package) - update to 5.15.0-1054.55
linux-image-5.15.0-1054-nvidia (Ubuntu package) - update to 5.15.0-1054.55
linux-image-5.15.0-1054-raspi (Ubuntu package) - update to 5.15.0-1054.57
linux-image-5.15.0-1054-ibm (Ubuntu package) - update to 5.15.0-1054.57~20.04.1
linux-image-intel-iotg (Ubuntu package) - update to 5.15.0.1057.57
linux-image-5.15.0-1057-intel-iotg (Ubuntu package) - update to 5.15.0-1057.63
linux-image-kvm (Ubuntu package) - addressed in versions 5.15.0.1058.54, 6.5.0.44.44
linux-image-gke (Ubuntu package) - update to 5.15.0.1058.57
linux-image-gke-5.15 (Ubuntu package) - update to 5.15.0.1058.57
linux-image-5.15.0-1058-gke (Ubuntu package) - update to 5.15.0-1058.63
linux-image-5.15.0-1058-kvm (Ubuntu package) - update to 5.15.0-1058.63
linux-image-oracle-lts-22.04 (Ubuntu package) - update to 5.15.0.1059.55
linux-image-gcp-lts-22.04 (Ubuntu package) - update to 5.15.0.1059.55
linux-image-oracle (Ubuntu package) - addressed in versions 5.15.0.1059.65~20.04.1, 6.5.0.1026.26~22.04.1
linux-image-5.15.0-1059-oracle (Ubuntu package) - update to 5.15.0-1059.65~20.04.1
linux-image-gcp (Ubuntu package) - addressed in versions 5.15.0.1059.67~20.04.1, 6.5.0.1024.26, 6.5.0.1024.26~22.04.1
linux-image-5.15.0-1059-gcp (Ubuntu package) - update to 5.15.0-1059.67~20.04.1
linux-image-aws-lts-22.04 (Ubuntu package) - update to 5.15.0.1061.61
linux-image-aws (Ubuntu package) - addressed in versions 5.15.0.1061.67~20.04.1, 6.5.0.1023.23~22.04.1
linux-image-5.15.0-1061-aws (Ubuntu package) - update to 5.15.0-1061.67~20.04.1
linux-image-azure-lts-22.04 (Ubuntu package) - update to 5.15.0.1063.61
linux-image-5.15.0-1063-azure-fde (Ubuntu package) - addressed in versions 5.15.0-1063.72.1, 5.15.0-1063.72~20.04.1.1
linux-image-azure-cvm (Ubuntu package) - update to 5.15.0.1063.72~20.04.1
linux-image-azure (Ubuntu package) - addressed in versions 5.15.0.1063.72~20.04.1, 6.5.0.1024.25~22.04.1
linux-image-5.15.0-1063-azure (Ubuntu package) - update to 5.15.0-1063.72~20.04.1
linux-image-azure-fde (Ubuntu package) - addressed in versions 5.15.0.1063.72~20.04.1.41, 6.5.0.1024.25~22.04.1
linux-image-azure-fde-lts-22.04 (Ubuntu package) - update to 5.15.0.1063.72.41
linux-5.15.160/kernel-modules - update to 5.15.160
linux-5.15.160/kernel-huge - update to 5.15.160
linux-5.15.160/kernel-generic - update to 5.15.160
linux-5.15.160/kernel-headers - update to 5.15.160_smp
linux (Debian package) - update to 6.1.85-1
linux-image-6.5.0-44-generic-64k (Ubuntu package) - addressed in versions 6.5.0-44.44, 6.5.0-44.44~22.04.1
linux-image-virtual-hwe-22.04 (Ubuntu package) - addressed in versions 6.5.0.44.44, 6.5.0.44.44~22.04.1
linux-image-6.5.0-44-generic (Ubuntu package) - addressed in versions 6.5.0-44.44, 6.5.0-44.44~22.04.1
linux-image-lowlatency-64k-hwe-22.04 (Ubuntu package) - update to 6.5.0.44.44.1~22.04.1
linux-image-6.5.0-44-lowlatency (Ubuntu package) - update to 6.5.0-44.44.1~22.04.1
linux-image-6.5.0-44-lowlatency-64k (Ubuntu package) - update to 6.5.0-44.44.1~22.04.1
linux-image-lowlatency-hwe-22.04 (Ubuntu package) - update to 6.5.0.44.44.1~22.04.1
linux-image-generic-hwe-22.04 (Ubuntu package) - update to 6.5.0.44.44~22.04.1
linux-image-generic-64k-hwe-22.04 (Ubuntu package) - update to 6.5.0.44.44~22.04.1
linux-image-starfive (Ubuntu package) - update to 6.5.0.1017.18~22.04.1
linux-image-6.5.0-1017-starfive (Ubuntu package) - update to 6.5.0-1017.18~22.04.1
linux-image-6.5.0-1020-raspi (Ubuntu package) - update to 6.5.0-1020.23
linux-image-6.5.0-1023-aws (Ubuntu package) - update to 6.5.0-1023.23~22.04.1
linux-image-6.5.0-1023-nvidia (Ubuntu package) - update to 6.5.0-1023.24
linux-image-6.5.0-1023-nvidia-64k (Ubuntu package) - update to 6.5.0-1023.24
linux-image-nvidia-hwe-22.04 (Ubuntu package) - update to 6.5.0.1023.31
linux-image-nvidia-64k-hwe-22.04 (Ubuntu package) - update to 6.5.0.1023.31
linux-image-nvidia-64k-6.5 (Ubuntu package) - update to 6.5.0.1023.31
linux-image-nvidia-6.5 (Ubuntu package) - update to 6.5.0.1023.31
linux-image-6.5.0-1024-azure (Ubuntu package) - update to 6.5.0-1024.25~22.04.1
linux-image-6.5.0-1024-azure-fde (Ubuntu package) - update to 6.5.0-1024.25~22.04.1
linux-image-6.5.0-1024-gcp (Ubuntu package) - addressed in versions 6.5.0-1024.26, 6.5.0-1024.26~22.04.1
linux-image-6.5.0-1026-oracle (Ubuntu package) - update to 6.5.0-1026.26~22.04.1
linux-image-oracle-64k (Ubuntu package) - update to 6.5.0.1026.26~22.04.1
linux-image-6.5.0-1026-oracle-64k (Ubuntu package) - update to 6.5.0-1026.26~22.04.1
linux-image-6.5.0-1027-oem (Ubuntu package) - update to 6.5.0-1027.28
linux-image-oem-22.04 (Ubuntu package) - update to 6.5.0.1027.29
linux-image-oem-22.04a (Ubuntu package) - update to 6.5.0.1027.29
linux-image-oem-22.04b (Ubuntu package) - update to 6.5.0.1027.29
linux-image-oem-22.04c (Ubuntu package) - update to 6.5.0.1027.29
linux-image-oem-22.04d (Ubuntu package) - update to 6.5.0.1027.29
IBM Security Guardium - update to 12.0p26
Guardium Data Protection - addressed in versions 12.0p35, 12.0p115

• https://git.kernel.org/stable/c/03358aba991668d3bb2c65b3c82aa32c36851170
• https://git.kernel.org/stable/c/aedda066d717a0b4335d7e0a00b2e3a61e40afcf
• https://git.kernel.org/stable/c/26dfe112ec2e95fe0099681f6aec33da13c2dd8e
• https://git.kernel.org/stable/c/559b6322f9480bff68cfa98d108991e945a4f284
• https://git.kernel.org/stable/c/6cdedc18ba7b9dacc36466e27e3267d201948c8d
• https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.149
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.79
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.18
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.7.6
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.8

• Improper locking in Linux kernel can j1939
• openEuler 20.03 LTS SP1 update for kernel
• openEuler 20.03 LTS SP4 update for kernel
• Ubuntu update for linux
• Ubuntu update for linux-hwe-5.15
• Ubuntu update for linux-aws
• Ubuntu update for linux-intel-iotg
• Slackware Linux update for kernel
• Debian update for linux
• Ubuntu update for linux
• Red Hat Enterprise Linux 9 update for kernel
• Ubuntu update for linux-azure-6.5
• Red Hat Enterprise Linux 9 update for kernel
• Ubuntu update for linux-hwe-6.5
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Ubuntu update for linux-aws-6.5
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.12
• Ubuntu update for linux-oem-6.5
• Multiple vulnerabilities in IBM Security Guardium
• Multiple vulnerabilities in IBM Guardium Data Protection
• Multiple vulnerabilities in IBM API Connect
• Red Hat Enterprise Linux 9 update for kernel-rt
• Red Hat Enterprise Linux 9 update for kernel