GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2023-52887 (GCVE-0-2023-52887)

Vulnerability from cvelistv5 – Published: 2024-07-29 15:52 – Updated: 2026-08-05 09:11
VLAI
Title
net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
Summary
In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new This patch enhances error handling in scenarios with RTS (Request to Send) messages arriving closely. It replaces the less informative WARN_ON_ONCE backtraces with a new error handling method. This provides clearer error messages and allows for the early termination of problematic sessions. Previously, sessions were only released at the end of j1939_xtp_rx_rts(). Potentially this could be reproduced with something like: testj1939 -r vcan0:0x80 & while true; do # send first RTS cansend vcan0 18EC8090#1014000303002301; # send second RTS cansend vcan0 18EC8090#1014000303002301; # send abort cansend vcan0 18EC8090#ff00000000002301; done
Severity
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-09-10 16:20 UTC
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 9d71dd0c70099914fcd063135da3c580865e924c , < ed581989d7ea9df6f8646beba2341e32cd49a1f9 (git)
Affected: 9d71dd0c70099914fcd063135da3c580865e924c , < f6c839e717901dbd6b1c1ca807b6210222eb70f6 (git)
Affected: 9d71dd0c70099914fcd063135da3c580865e924c , < 1762ca80c2b72dd1b5821c5e347713ae696276ea (git)
Affected: 9d71dd0c70099914fcd063135da3c580865e924c , < 26b18dd30e63d4fd777be429148e8e4ed66f60b2 (git)
Affected: 9d71dd0c70099914fcd063135da3c580865e924c , < 177e33b655d35d72866b50aec84307119dc5f3d4 (git)
Affected: 9d71dd0c70099914fcd063135da3c580865e924c , < 0bc0a7416ea73f79f915c9a05ac0858dff65cfed (git)
Affected: 9d71dd0c70099914fcd063135da3c580865e924c , < d3e2904f71ea0fe7eaff1d68a2b0363c888ea0fb (git)
guessed Create a notification for this product.
Linux Linux Affected: 5.4
Unaffected: 0 , < 5.4 (semver)
Unaffected: 5.4.279 , ≤ 5.4.* (semver)
Unaffected: 5.10.221 , ≤ 5.10.* (semver)
Unaffected: 5.15.162 , ≤ 5.15.* (semver)
Unaffected: 6.1.97 , ≤ 6.1.* (semver)
Unaffected: 6.6.37 , ≤ 6.6.* (semver)
Unaffected: 6.9.8 , ≤ 6.9.* (semver)
Unaffected: 6.10 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:50:27.866Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/ed581989d7ea9df6f8646beba2341e32cd49a1f9"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/f6c839e717901dbd6b1c1ca807b6210222eb70f6"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/1762ca80c2b72dd1b5821c5e347713ae696276ea"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/26b18dd30e63d4fd777be429148e8e4ed66f60b2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/177e33b655d35d72866b50aec84307119dc5f3d4"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/0bc0a7416ea73f79f915c9a05ac0858dff65cfed"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/d3e2904f71ea0fe7eaff1d68a2b0363c888ea0fb"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-52887",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:20:12.491125Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:33:08.617Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/can/j1939/transport.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "ed581989d7ea9df6f8646beba2341e32cd49a1f9",
              "status": "affected",
              "version": "9d71dd0c70099914fcd063135da3c580865e924c",
              "versionType": "git"
            },
            {
              "lessThan": "f6c839e717901dbd6b1c1ca807b6210222eb70f6",
              "status": "affected",
              "version": "9d71dd0c70099914fcd063135da3c580865e924c",
              "versionType": "git"
            },
            {
              "lessThan": "1762ca80c2b72dd1b5821c5e347713ae696276ea",
              "status": "affected",
              "version": "9d71dd0c70099914fcd063135da3c580865e924c",
              "versionType": "git"
            },
            {
              "lessThan": "26b18dd30e63d4fd777be429148e8e4ed66f60b2",
              "status": "affected",
              "version": "9d71dd0c70099914fcd063135da3c580865e924c",
              "versionType": "git"
            },
            {
              "lessThan": "177e33b655d35d72866b50aec84307119dc5f3d4",
              "status": "affected",
              "version": "9d71dd0c70099914fcd063135da3c580865e924c",
              "versionType": "git"
            },
            {
              "lessThan": "0bc0a7416ea73f79f915c9a05ac0858dff65cfed",
              "status": "affected",
              "version": "9d71dd0c70099914fcd063135da3c580865e924c",
              "versionType": "git"
            },
            {
              "lessThan": "d3e2904f71ea0fe7eaff1d68a2b0363c888ea0fb",
              "status": "affected",
              "version": "9d71dd0c70099914fcd063135da3c580865e924c",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/can/j1939/transport.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.4"
            },
            {
              "lessThan": "5.4",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.279",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.221",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.162",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.97",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.37",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.9.*",
              "status": "unaffected",
              "version": "6.9.8",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.10",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.279",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.221",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.162",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.97",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.37",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.8",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10",
                  "versionStartIncluding": "5.4",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new\n\nThis patch enhances error handling in scenarios with RTS (Request to\nSend) messages arriving closely. It replaces the less informative WARN_ON_ONCE\nbacktraces with a new error handling method. This provides clearer error\nmessages and allows for the early termination of problematic sessions.\nPreviously, sessions were only released at the end of j1939_xtp_rx_rts().\n\nPotentially this could be reproduced with something like:\ntestj1939 -r vcan0:0x80 \u0026\nwhile true; do\n\t# send first RTS\n\tcansend vcan0 18EC8090#1014000303002301;\n\t# send second RTS\n\tcansend vcan0 18EC8090#1014000303002301;\n\t# send abort\n\tcansend vcan0 18EC8090#ff00000000002301;\ndone"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - The vulnerable code is reached by received SAE J1939 TP.CM RTS frames via can_rcv \u2192 j1939_can_recv \u2192 j1939_tp_recv \u2192 j1939_xtp_rx_rts \u2192 j1939_xtp_rx_rts_session_new. An unauthenticated CAN/J1939 peer can trigger it without local code execution on the target, consistent with other packet-triggered j1939 scores.\nAC:L - The attacker reliably triggers the bug by sending tightly spaced duplicate RTS (and abort) frames, as in the documented cansend reproducer; the attacker fully controls packet contents and timing.\nPR:N - J1939/CAN receive processing has no authentication gate; once a legitimate J1939 socket is bound on the victim (normal for J1939 deployments), an unauthenticated bus peer can inject the crafted RTS sequence.\nUI:N - No user action is required beyond the target already running the J1939 stack with a bound socket; the attacker only needs to transmit frames.\nS:U - Impact is confined to kernel J1939 session handling within the same kernel security authority and does not cross VM, IOMMU, or sandbox boundaries.\nC:N - The failure path is a WARN_ON_ONCE plus continued use of a never-activated session that is later freed via timer refs; investigation found no info leak, OOB read, or UAF disclosure primitive.\nI:N - No out-of-bounds write, type confusion, or other integrity/write primitive was identified; the ghost session may confuse transport state but does not yield attacker-controlled memory modification.\nA:H - WARN_ON_ONCE in softirq receive context can panic the kernel (e.g. panic_on_warn), and the bug can be retriggered repeatedly by an adjacent/network peer to deny J1939/CAN service."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:11:52.764Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/ed581989d7ea9df6f8646beba2341e32cd49a1f9"
        },
        {
          "url": "https://git.kernel.org/stable/c/f6c839e717901dbd6b1c1ca807b6210222eb70f6"
        },
        {
          "url": "https://git.kernel.org/stable/c/1762ca80c2b72dd1b5821c5e347713ae696276ea"
        },
        {
          "url": "https://git.kernel.org/stable/c/26b18dd30e63d4fd777be429148e8e4ed66f60b2"
        },
        {
          "url": "https://git.kernel.org/stable/c/177e33b655d35d72866b50aec84307119dc5f3d4"
        },
        {
          "url": "https://git.kernel.org/stable/c/0bc0a7416ea73f79f915c9a05ac0858dff65cfed"
        },
        {
          "url": "https://git.kernel.org/stable/c/d3e2904f71ea0fe7eaff1d68a2b0363c888ea0fb"
        }
      ],
      "title": "net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-52887",
    "datePublished": "2024-07-29T15:52:27.615Z",
    "dateReserved": "2024-05-21T15:35:00.782Z",
    "dateUpdated": "2026-08-05T09:11:52.764Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-52887",
      "date": "2026-09-16",
      "epss": "0.0067",
      "percentile": "0.50272"
    },
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new\\n\\nThis patch enhances error handling in scenarios with RTS (Request to\\nSend) messages arriving closely. It replaces the less informative WARN_ON_ONCE\\nbacktraces with a new error handling method. This provides clearer error\\nmessages and allows for the early termination of problematic sessions.\\nPreviously, sessions were only released at the end of j1939_xtp_rx_rts().\\n\\nPotentially this could be reproduced with something like:\\ntestj1939 -r vcan0:0x80 \u0026\\nwhile true; do\\n\\t# send first RTS\\n\\tcansend vcan0 18EC8090#1014000303002301;\\n\\t# send second RTS\\n\\tcansend vcan0 18EC8090#1014000303002301;\\n\\t# send abort\\n\\tcansend vcan0 18EC8090#ff00000000002301;\\ndone\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: can: j1939: manejo de errores mejorado para mensajes RTS recibidos estrechamente en xtp_rx_rts_session_new Este parche mejora el manejo de errores en escenarios con mensajes RTS (Solicitud de env\\u00edo) que llegan cerca. Reemplaza los rastreos WARN_ON_ONCE menos informativos con un nuevo m\\u00e9todo de manejo de errores. Esto proporciona mensajes de error m\\u00e1s claros y permite la finalizaci\\u00f3n anticipada de sesiones problem\\u00e1ticas. Anteriormente, las sesiones s\\u00f3lo se publicaban al final de j1939_xtp_rx_rts(). Potencialmente, esto podr\\u00eda reproducirse con algo como: testj1939 -r vcan0:0x80 \u0026amp; while true; hacer # enviar primero RTS cansend vcan0 18EC8090#1014000303002301; # enviar segundo RTS cansend vcan0 18EC8090#1014000303002301; # enviar cancelar cansend vcan0 18EC8090#ff00000000002301; hecho\"}]",
      "id": "CVE-2023-52887",
      "lastModified": "2024-11-21T08:40:48.320",
      "published": "2024-07-29T16:15:03.150",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/0bc0a7416ea73f79f915c9a05ac0858dff65cfed\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/1762ca80c2b72dd1b5821c5e347713ae696276ea\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/177e33b655d35d72866b50aec84307119dc5f3d4\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/26b18dd30e63d4fd777be429148e8e4ed66f60b2\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/d3e2904f71ea0fe7eaff1d68a2b0363c888ea0fb\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/ed581989d7ea9df6f8646beba2341e32cd49a1f9\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/f6c839e717901dbd6b1c1ca807b6210222eb70f6\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/0bc0a7416ea73f79f915c9a05ac0858dff65cfed\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/1762ca80c2b72dd1b5821c5e347713ae696276ea\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/177e33b655d35d72866b50aec84307119dc5f3d4\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/26b18dd30e63d4fd777be429148e8e4ed66f60b2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/d3e2904f71ea0fe7eaff1d68a2b0363c888ea0fb\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/ed581989d7ea9df6f8646beba2341e32cd49a1f9\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/f6c839e717901dbd6b1c1ca807b6210222eb70f6\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Awaiting Analysis"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-52887\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-07-29T16:15:03.150\",\"lastModified\":\"2026-08-04T10:18:47.980\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new\\n\\nThis patch enhances error handling in scenarios with RTS (Request to\\nSend) messages arriving closely. It replaces the less informative WARN_ON_ONCE\\nbacktraces with a new error handling method. This provides clearer error\\nmessages and allows for the early termination of problematic sessions.\\nPreviously, sessions were only released at the end of j1939_xtp_rx_rts().\\n\\nPotentially this could be reproduced with something like:\\ntestj1939 -r vcan0:0x80 \u0026\\nwhile true; do\\n\\t# send first RTS\\n\\tcansend vcan0 18EC8090#1014000303002301;\\n\\t# send second RTS\\n\\tcansend vcan0 18EC8090#1014000303002301;\\n\\t# send abort\\n\\tcansend vcan0 18EC8090#ff00000000002301;\\ndone\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net: can: j1939: manejo de errores mejorado para mensajes RTS recibidos estrechamente en xtp_rx_rts_session_new Este parche mejora el manejo de errores en escenarios con mensajes RTS (Solicitud de env\u00edo) que llegan cerca. Reemplaza los rastreos WARN_ON_ONCE menos informativos con un nuevo m\u00e9todo de manejo de errores. Esto proporciona mensajes de error m\u00e1s claros y permite la finalizaci\u00f3n anticipada de sesiones problem\u00e1ticas. Anteriormente, las sesiones s\u00f3lo se publicaban al final de j1939_xtp_rx_rts(). Potencialmente, esto podr\u00eda reproducirse con algo como: testj1939 -r vcan0:0x80 \u0026amp; while true; hacer # enviar primero RTS cansend vcan0 18EC8090#1014000303002301; # enviar segundo RTS cansend vcan0 18EC8090#1014000303002301; # enviar cancelar cansend vcan0 18EC8090#ff00000000002301; hecho\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/can/j1939/transport.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"9d71dd0c70099914fcd063135da3c580865e924c\",\"lessThan\":\"ed581989d7ea9df6f8646beba2341e32cd49a1f9\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"9d71dd0c70099914fcd063135da3c580865e924c\",\"lessThan\":\"f6c839e717901dbd6b1c1ca807b6210222eb70f6\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"9d71dd0c70099914fcd063135da3c580865e924c\",\"lessThan\":\"1762ca80c2b72dd1b5821c5e347713ae696276ea\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"9d71dd0c70099914fcd063135da3c580865e924c\",\"lessThan\":\"26b18dd30e63d4fd777be429148e8e4ed66f60b2\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"9d71dd0c70099914fcd063135da3c580865e924c\",\"lessThan\":\"177e33b655d35d72866b50aec84307119dc5f3d4\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"9d71dd0c70099914fcd063135da3c580865e924c\",\"lessThan\":\"0bc0a7416ea73f79f915c9a05ac0858dff65cfed\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"9d71dd0c70099914fcd063135da3c580865e924c\",\"lessThan\":\"d3e2904f71ea0fe7eaff1d68a2b0363c888ea0fb\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/can/j1939/transport.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.4\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.4\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.279\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.221\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.162\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.97\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.37\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.9.8\",\"lessThanOrEqual\":\"6.9.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.10\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-09-10T16:20:12.491125Z\",\"id\":\"CVE-2023-52887\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-617\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.4\",\"versionEndExcluding\":\"5.4.279\",\"matchCriteriaId\":\"1A920648-B954-4FF9-B516-2BAFC2674086\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.221\",\"matchCriteriaId\":\"659E1520-6345-41AF-B893-A7C0647585A0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.162\",\"matchCriteriaId\":\"10A39ACC-3005-40E8-875C-98A372D1FFD5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.97\",\"matchCriteriaId\":\"748B6C4B-1F61-47F9-96CC-8899B8412D84\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.37\",\"matchCriteriaId\":\"D72E033B-5323-4C4D-8818-36E1EBC3535F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.9.8\",\"matchCriteriaId\":\"E95105F2-32E3-4C5F-9D18-7AEFD0E6275C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"2EBB4392-5FA6-4DA9-9772-8F9C750109FA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"331C2F14-12C7-45D5-893D-8C52EE38EA10\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.10:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"3173713D-909A-4DD3-9DD4-1E171EB057EE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.10:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"79F18AFA-40F7-43F0-BA30-7BDB65F918B9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.10:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD973AA4-A789-49BD-8D57-B2846935D3C7\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/0bc0a7416ea73f79f915c9a05ac0858dff65cfed\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/1762ca80c2b72dd1b5821c5e347713ae696276ea\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/177e33b655d35d72866b50aec84307119dc5f3d4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/26b18dd30e63d4fd777be429148e8e4ed66f60b2\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d3e2904f71ea0fe7eaff1d68a2b0363c888ea0fb\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ed581989d7ea9df6f8646beba2341e32cd49a1f9\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f6c839e717901dbd6b1c1ca807b6210222eb70f6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/0bc0a7416ea73f79f915c9a05ac0858dff65cfed\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/1762ca80c2b72dd1b5821c5e347713ae696276ea\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/177e33b655d35d72866b50aec84307119dc5f3d4\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/26b18dd30e63d4fd777be429148e8e4ed66f60b2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d3e2904f71ea0fe7eaff1d68a2b0363c888ea0fb\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ed581989d7ea9df6f8646beba2341e32cd49a1f9\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f6c839e717901dbd6b1c1ca807b6210222eb70f6\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-08-04T22:56:19+00:00",
      "cve": "CVE-2023-52887",
      "id": "CVE-2023-52887",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:known_affected": "108",
      "product_status:known_not_affected": "90",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-52887.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-02T01:47:16Z",
      "cve": "CVE-2023-52887",
      "id": "CVE-2023-52887",
      "initial_release_date": "2024-08-06T02:14:33Z",
      "product_status:known_affected": "340",
      "product_status:known_not_affected": "207",
      "product_status:recommended": "643",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-52887",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-52887.json",
      "version": "107"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/ed581989d7ea9df6f8646beba2341e32cd49a1f9\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/f6c839e717901dbd6b1c1ca807b6210222eb70f6\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/1762ca80c2b72dd1b5821c5e347713ae696276ea\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/26b18dd30e63d4fd777be429148e8e4ed66f60b2\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/177e33b655d35d72866b50aec84307119dc5f3d4\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/0bc0a7416ea73f79f915c9a05ac0858dff65cfed\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/d3e2904f71ea0fe7eaff1d68a2b0363c888ea0fb\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T21:50:27.866Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-52887\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-10T16:20:12.491125Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-11T12:42:14.744Z\"}}], \"cna\": {\"title\": \"net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new\", \"metrics\": [{\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"AV:N - The vulnerable code is reached by received SAE J1939 TP.CM RTS frames via can_rcv \\u2192 j1939_can_recv \\u2192 j1939_tp_recv \\u2192 j1939_xtp_rx_rts \\u2192 j1939_xtp_rx_rts_session_new. An unauthenticated CAN/J1939 peer can trigger it without local code execution on the target, consistent with other packet-triggered j1939 scores.\\nAC:L - The attacker reliably triggers the bug by sending tightly spaced duplicate RTS (and abort) frames, as in the documented cansend reproducer; the attacker fully controls packet contents and timing.\\nPR:N - J1939/CAN receive processing has no authentication gate; once a legitimate J1939 socket is bound on the victim (normal for J1939 deployments), an unauthenticated bus peer can inject the crafted RTS sequence.\\nUI:N - No user action is required beyond the target already running the J1939 stack with a bound socket; the attacker only needs to transmit frames.\\nS:U - Impact is confined to kernel J1939 session handling within the same kernel security authority and does not cross VM, IOMMU, or sandbox boundaries.\\nC:N - The failure path is a WARN_ON_ONCE plus continued use of a never-activated session that is later freed via timer refs; investigation found no info leak, OOB read, or UAF disclosure primitive.\\nI:N - No out-of-bounds write, type confusion, or other integrity/write primitive was identified; the ghost session may confuse transport state but does not yield attacker-controlled memory modification.\\nA:H - WARN_ON_ONCE in softirq receive context can panic the kernel (e.g. panic_on_warn), and the bug can be retriggered repeatedly by an adjacent/network peer to deny J1939/CAN service.\"}]}], \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"9d71dd0c70099914fcd063135da3c580865e924c\", \"lessThan\": \"ed581989d7ea9df6f8646beba2341e32cd49a1f9\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"9d71dd0c70099914fcd063135da3c580865e924c\", \"lessThan\": \"f6c839e717901dbd6b1c1ca807b6210222eb70f6\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"9d71dd0c70099914fcd063135da3c580865e924c\", \"lessThan\": \"1762ca80c2b72dd1b5821c5e347713ae696276ea\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"9d71dd0c70099914fcd063135da3c580865e924c\", \"lessThan\": \"26b18dd30e63d4fd777be429148e8e4ed66f60b2\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"9d71dd0c70099914fcd063135da3c580865e924c\", \"lessThan\": \"177e33b655d35d72866b50aec84307119dc5f3d4\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"9d71dd0c70099914fcd063135da3c580865e924c\", \"lessThan\": \"0bc0a7416ea73f79f915c9a05ac0858dff65cfed\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"9d71dd0c70099914fcd063135da3c580865e924c\", \"lessThan\": \"d3e2904f71ea0fe7eaff1d68a2b0363c888ea0fb\", \"versionType\": \"git\"}], \"programFiles\": [\"net/can/j1939/transport.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.4\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"5.4\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"5.4.279\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.221\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.162\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.97\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.37\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.9.8\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.9.*\"}, {\"status\": \"unaffected\", \"version\": \"6.10\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"net/can/j1939/transport.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/ed581989d7ea9df6f8646beba2341e32cd49a1f9\"}, {\"url\": \"https://git.kernel.org/stable/c/f6c839e717901dbd6b1c1ca807b6210222eb70f6\"}, {\"url\": \"https://git.kernel.org/stable/c/1762ca80c2b72dd1b5821c5e347713ae696276ea\"}, {\"url\": \"https://git.kernel.org/stable/c/26b18dd30e63d4fd777be429148e8e4ed66f60b2\"}, {\"url\": \"https://git.kernel.org/stable/c/177e33b655d35d72866b50aec84307119dc5f3d4\"}, {\"url\": \"https://git.kernel.org/stable/c/0bc0a7416ea73f79f915c9a05ac0858dff65cfed\"}, {\"url\": \"https://git.kernel.org/stable/c/d3e2904f71ea0fe7eaff1d68a2b0363c888ea0fb\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new\\n\\nThis patch enhances error handling in scenarios with RTS (Request to\\nSend) messages arriving closely. It replaces the less informative WARN_ON_ONCE\\nbacktraces with a new error handling method. This provides clearer error\\nmessages and allows for the early termination of problematic sessions.\\nPreviously, sessions were only released at the end of j1939_xtp_rx_rts().\\n\\nPotentially this could be reproduced with something like:\\ntestj1939 -r vcan0:0x80 \u0026\\nwhile true; do\\n\\t# send first RTS\\n\\tcansend vcan0 18EC8090#1014000303002301;\\n\\t# send second RTS\\n\\tcansend vcan0 18EC8090#1014000303002301;\\n\\t# send abort\\n\\tcansend vcan0 18EC8090#ff00000000002301;\\ndone\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.279\", \"versionStartIncluding\": \"5.4\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.221\", \"versionStartIncluding\": \"5.4\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.162\", \"versionStartIncluding\": \"5.4\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.97\", \"versionStartIncluding\": \"5.4\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.37\", \"versionStartIncluding\": \"5.4\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.9.8\", \"versionStartIncluding\": \"5.4\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.10\", \"versionStartIncluding\": \"5.4\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-08-05T09:11:52.764Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2023-52887\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-05T09:11:52.764Z\", \"dateReserved\": \"2024-05-21T15:35:00.782Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-07-29T15:52:27.615Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.