CVE-2023-52837
- Source
- https://cve.org/CVERecord?id=CVE-2023-52837
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52837.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2023-52837
- Downstream
- Related
- Published
- 2024-05-21T15:31:37.859Z
- Modified
- 2026-05-15T04:07:49.862713245Z
- Summary
- nbd: fix uaf in nbd_open
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
nbd: fix uaf in nbd_open
Commit 4af5f2e03013 ("nbd: use blkmqallocdisk and blkcleanupdisk") cleans up disk by blkcleanupdisk() and it won't set disk->privatedata as NULL as before. UAF may be triggered in nbdopen() if someone tries to open nbd device right after nbdput() since nbd has been free in nbddevremove().
Fix this by implementing ->free_disk and free private data in it.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52837.json" }- References
-
- https://git.kernel.org/stable/c/327462725b0f759f093788dfbcb2f1fd132f956b
- https://git.kernel.org/stable/c/4e9b3ec84dc97909876641dad14e0a2300d6c2a3
- https://git.kernel.org/stable/c/56bd7901b5e9dbc9112036ea615ebcba1565fafe
- https://git.kernel.org/stable/c/879947f4180bc6e83af64eb0515e0cf57fce15db
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52837.json
- https://nvd.nist.gov/vuln/detail/CVE-2023-52837
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git