CVE catalog
CVE-2023-52922
linux: CVE-2023-52922
- Severity
- High · CVSS 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.30% · Oct 25, 2026
In the Linux kernel, the following vulnerability has been resolved: can: bcm: Fix UAF in bcm_proc_show() BUG: KASAN: slab-use-after-free in bcm_proc_show+0x969/0xa80 Read of size 8 at addr ffff888155846230 by task cat/7862 CPU: 1 PID: 7862 Comm: cat Not tainted 6.5.0-rc1-00153-gc8746099c197 #230 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0xd5/0x150 print_report+0xc1/0x5e0 kasan_report+0xba/0xf0 bcm_proc_show+0x969/0xa80 seq_read_iter+0x4f6/0x1260 seq_read+0x165/0x210 proc_reg_read+0x227/0x300 vfs_read+0x1d5/0x8d0 ksys_read+0x11e/0x240 do_syscall_64+0x35/0xb0 entry_SYSCALL_64_after_hwframe+0x63/0xcd Allocated by task 7846: kasan_save_stack+0x1e/0x40 kasan_set_track+0x21/0x30 __kasan_kmalloc+0x9e/0xa0 bcm_sendmsg+0x264b/0x44e0 sock_sendmsg+0xda/0x180 ____sys_sendmsg+0x735/0x920 ___sys_sendmsg+0x11d/0x1b0 __sys_sendmsg+0xfa/0x1d0 do_syscall_64+0x35/0xb0 entry_SYSCALL_64_after_hwframe+0x63/0xcd Freed by task 7846: kasan_save_stack+0x1e/0x40 kasan_set_track+0x21/0x30 kasan_save_free_info+0x27/0x40 ____kasan_slab_free+0x161/0x1c0 slab_free_freelist_hook+0x119/0x220 __kmem_cache_free+0xb4/0x2e0 rcu_core+0x809/0x1bd0 bcm_op is freed before procfs entry be removed in bcm_release(), this lead to bcm_proc_show() may read the freed bcm_op.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | linux | sid | 7.2.12-1 | fixed |
| Debian | linux | forky | 7.2.12-1 | fixed |
| Debian | linux | trixie | 6.12.107-1 | fixed |
| Debian | linux | trixie-security | 6.12.113-1 | fixed |
| Debian | linux | bookworm | 6.1.176-1 | fixed |
| Debian | linux | bookworm-security | 6.1.190-1 | fixed |
| Suse | kernel-default | linux enterprise micro 5.3 | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-default-base | linux enterprise micro 5.3 | 5.14.21-150400.24.144.1.150400.24.70.1 | fixed |
| Suse | kernel-default | linux enterprise micro 5.4 | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-default-base | linux enterprise micro 5.4 | 5.14.21-150400.24.144.1.150400.24.70.1 | fixed |
| Suse | kernel-default | linux enterprise live patching 15 sp4 | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-livepatch-SLE15-SP4_Update_34 | linux enterprise live patching 15 sp4 | 1-150400.9.3.1 | fixed |
| Suse | kernel-default | linux enterprise high availability extension 15 sp4 | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-64kb | linux enterprise high performance computing 15 sp4-espos | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-default | linux enterprise high performance computing 15 sp4-espos | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-default-base | linux enterprise high performance computing 15 sp4-espos | 5.14.21-150400.24.144.1.150400.24.70.1 | fixed |
| Suse | kernel-docs | linux enterprise high performance computing 15 sp4-espos | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-obs-build | linux enterprise high performance computing 15 sp4-espos | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-source | linux enterprise high performance computing 15 sp4-espos | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-syms | linux enterprise high performance computing 15 sp4-espos | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-64kb | linux enterprise high performance computing 15 sp4-ltss | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-default | linux enterprise high performance computing 15 sp4-ltss | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-default-base | linux enterprise high performance computing 15 sp4-ltss | 5.14.21-150400.24.144.1.150400.24.70.1 | fixed |
| Suse | kernel-docs | linux enterprise high performance computing 15 sp4-ltss | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-obs-build | linux enterprise high performance computing 15 sp4-ltss | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-source | linux enterprise high performance computing 15 sp4-ltss | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-syms | linux enterprise high performance computing 15 sp4-ltss | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-64kb | linux enterprise server 15 sp4-ltss | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-default | linux enterprise server 15 sp4-ltss | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-default-base | linux enterprise server 15 sp4-ltss | 5.14.21-150400.24.144.1.150400.24.70.1 | fixed |
| Suse | kernel-docs | linux enterprise server 15 sp4-ltss | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-obs-build | linux enterprise server 15 sp4-ltss | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-source | linux enterprise server 15 sp4-ltss | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-syms | linux enterprise server 15 sp4-ltss | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-zfcpdump | linux enterprise server 15 sp4-ltss | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-default | linux enterprise server for sap applications 15 sp4 | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-default-base | linux enterprise server for sap applications 15 sp4 | 5.14.21-150400.24.144.1.150400.24.70.1 | fixed |
| Suse | kernel-docs | linux enterprise server for sap applications 15 sp4 | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-obs-build | linux enterprise server for sap applications 15 sp4 | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-source | linux enterprise server for sap applications 15 sp4 | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-syms | linux enterprise server for sap applications 15 sp4 | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-default | manager proxy 4.3 | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-default-base | manager proxy 4.3 | 5.14.21-150400.24.144.1.150400.24.70.1 | fixed |
| Suse | kernel-source | manager proxy 4.3 | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-syms | manager proxy 4.3 | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-default | manager server 4.3 | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-default-base | manager server 4.3 | 5.14.21-150400.24.144.1.150400.24.70.1 | fixed |
| Suse | kernel-source | manager server 4.3 | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-syms | manager server 4.3 | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-zfcpdump | manager server 4.3 | 5.14.21-150400.24.144.1 | fixed |
| Suse | kernel-rt | linux enterprise micro 5.3 | 5.14.21-150400.15.103.1 | fixed |
| Suse | kernel-source-rt | linux enterprise micro 5.3 | 5.14.21-150400.15.103.1 | fixed |
| Suse | kernel-rt | linux enterprise micro 5.4 | 5.14.21-150400.15.103.1 | fixed |
| Suse | kernel-source-rt | linux enterprise micro 5.4 | 5.14.21-150400.15.103.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | linux | source | sid | 6.4.11-1 | not yet assigned | Not reported | Not reported |
| Debian | linux | source | forky | 6.4.11-1 | not yet assigned | Not reported | Not reported |
| Debian | linux | source | trixie | 6.4.11-1 | not yet assigned | Not reported | Not reported |
| Debian | linux | source | bookworm | 6.1.52-1 | not yet assigned | Not reported | Not reported |
| Suse | kernel-default | rpm | linux enterprise micro 5.3 | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-default-base | rpm | linux enterprise micro 5.3 | 5.14.21-150400.24.144.1.150400.24.70.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-default | rpm | linux enterprise micro 5.4 | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-default-base | rpm | linux enterprise micro 5.4 | 5.14.21-150400.24.144.1.150400.24.70.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-default | rpm | linux enterprise live patching 15 sp4 | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-livepatch-SLE15-SP4_Update_34 | rpm | linux enterprise live patching 15 sp4 | 1-150400.9.3.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-default | rpm | linux enterprise high availability extension 15 sp4 | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-64kb | rpm | linux enterprise high performance computing 15 sp4-espos | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-default | rpm | linux enterprise high performance computing 15 sp4-espos | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-default-base | rpm | linux enterprise high performance computing 15 sp4-espos | 5.14.21-150400.24.144.1.150400.24.70.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-docs | rpm | linux enterprise high performance computing 15 sp4-espos | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-obs-build | rpm | linux enterprise high performance computing 15 sp4-espos | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-source | rpm | linux enterprise high performance computing 15 sp4-espos | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-syms | rpm | linux enterprise high performance computing 15 sp4-espos | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-64kb | rpm | linux enterprise high performance computing 15 sp4-ltss | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-default | rpm | linux enterprise high performance computing 15 sp4-ltss | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-default-base | rpm | linux enterprise high performance computing 15 sp4-ltss | 5.14.21-150400.24.144.1.150400.24.70.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-docs | rpm | linux enterprise high performance computing 15 sp4-ltss | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-obs-build | rpm | linux enterprise high performance computing 15 sp4-ltss | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-source | rpm | linux enterprise high performance computing 15 sp4-ltss | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-syms | rpm | linux enterprise high performance computing 15 sp4-ltss | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-64kb | rpm | linux enterprise server 15 sp4-ltss | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-default | rpm | linux enterprise server 15 sp4-ltss | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-default-base | rpm | linux enterprise server 15 sp4-ltss | 5.14.21-150400.24.144.1.150400.24.70.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-docs | rpm | linux enterprise server 15 sp4-ltss | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-obs-build | rpm | linux enterprise server 15 sp4-ltss | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-source | rpm | linux enterprise server 15 sp4-ltss | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-syms | rpm | linux enterprise server 15 sp4-ltss | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-zfcpdump | rpm | linux enterprise server 15 sp4-ltss | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-default | rpm | linux enterprise server for sap applications 15 sp4 | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-default-base | rpm | linux enterprise server for sap applications 15 sp4 | 5.14.21-150400.24.144.1.150400.24.70.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-docs | rpm | linux enterprise server for sap applications 15 sp4 | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-obs-build | rpm | linux enterprise server for sap applications 15 sp4 | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-source | rpm | linux enterprise server for sap applications 15 sp4 | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-syms | rpm | linux enterprise server for sap applications 15 sp4 | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-default | rpm | manager proxy 4.3 | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-default-base | rpm | manager proxy 4.3 | 5.14.21-150400.24.144.1.150400.24.70.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-source | rpm | manager proxy 4.3 | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-syms | rpm | manager proxy 4.3 | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-default | rpm | manager server 4.3 | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-default-base | rpm | manager server 4.3 | 5.14.21-150400.24.144.1.150400.24.70.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-source | rpm | manager server 4.3 | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-syms | rpm | manager server 4.3 | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-zfcpdump | rpm | manager server 4.3 | 5.14.21-150400.24.144.1 | Not reported | SUSE-SU-2024:4346-1 | Not reported |
| Suse | kernel-rt | rpm | linux enterprise micro 5.3 | 5.14.21-150400.15.103.1 | Not reported | SUSE-SU-2024:4345-1 | Not reported |
| Suse | kernel-source-rt | rpm | linux enterprise micro 5.3 | 5.14.21-150400.15.103.1 | Not reported | SUSE-SU-2024:4345-1 | Not reported |
| Suse | kernel-rt | rpm | linux enterprise micro 5.4 | 5.14.21-150400.15.103.1 | Not reported | SUSE-SU-2024:4345-1 | Not reported |
| Suse | kernel-source-rt | rpm | linux enterprise micro 5.4 | 5.14.21-150400.15.103.1 | Not reported | SUSE-SU-2024:4345-1 | Not reported |
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
References
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2025_2501.json]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2023-52922]
- [https://osv.dev/vulnerability/SUSE-SU-2024:4345-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:4346-1]
- [https://security-tracker.debian.org/tracker/CVE-2023-52922]
- [https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-52922.json]
- [https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3565.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]