CVE-2023-52834: atl1c: Work around the DMA RX overflow issue
In the Linux kernel, the following vulnerability has been resolved:
atl1c: Work around the DMA RX overflow issue
The Linux kernel CVE team has assigned CVE-2023-52834 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024052109-CVE-2023-52834-4c46@gregkh/T
Other sources
In the Linux kernel, the following vulnerability has been resolved:
atl1c: Work around the DMA RX overflow issue
This is based on alx driver commit 881d0327db37 ("net: alx: Work around the DMA RX overflow issue").
The alx and atl1c drivers had RX overflow error which was why a custom allocator was created to avoid certain addresses. The simpler workaround then created for alx driver, but not for atl1c due to lack of tester.
Instead of using a custom allocator, check the allocated skb address and use skbreserve() to move away from problematic 0x...fc0 address.
Tested on AR8131 on Acer 4540.
— NVD
Linux Kernel is vulnerable to a denial of service, caused by an DMA RX overflow issue. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause a denial of service condition.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52834?
CVE-2023-52834 is a vulnerability in the Linux kernel that addresses a DMA RX overflow issue.
How do I fix CVE-2023-52834?
To resolve CVE-2023-52834, upgrade affected kernel versions to 5.15.140, 6.1.64, 6.5.13, 6.6.3, or 6.7.
Which systems are affected by CVE-2023-52834?
CVE-2023-52834 affects specific versions of the Linux kernel as well as IBM Security Verify Governance products up to version ISVG 10.0.2.
What products are impacted by CVE-2023-52834?
CVE-2023-52834 impacts IBM Security Verify Governance, Identity Manager software stack, and its virtual appliances and containers.
Is CVE-2023-52834 a critical vulnerability?
While the severity level is not specified, any vulnerability affecting the Linux kernel should be addressed promptly due to its potential impact.