{
  "cveId": "CVE-2023-52577",
  "url": "https://patchblox.com/security/cve/CVE-2023-52577",
  "summary": "CVE-2023-52577 is fixed in linux on 1 platform, first by DEBIAN-CVE-2023-52577, released March 2, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  dccp: fix dccp_v4_err()/dccp_v6_err() again  dh-...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  dccp: fix dccp_v4_err()/dccp_v6_err() again  dh-\u003Edccph_x is the 9th byte (offset 8) in \u0022struct dccp_hdr\u0022, not in the \u0022byte 7\u0022 as Jann claimed.  We need to make sure the ICMP messages are big enough, using more standard ways (no more assumptions).  syzbot reported: BUG: KMSAN: uninit-value in pskb_may_pull_reason include/linux/skbuff.h:2667 [inline] BUG: KMSAN: uninit-value in pskb_may_pull include/linux/skbuff.h:2681 [inline] BUG: KMSAN: uninit-value in dccp_v6_err\u002B0x426/0x1aa0 net/dccp/ipv6.c:94 pskb_may_pull_reason include/linux/skbuff.h:2667 [inline] pskb_may_pull include/linux/skbuff.h:2681 [inline] dccp_v6_err\u002B0x426/0x1aa0 net/dccp/ipv6.c:94 icmpv6_notify\u002B0x4c7/0x880 net/ipv6/icmp.c:867 icmpv6_rcv\u002B0x19d5/0x30d0 ip6_protocol_deliver_rcu\u002B0xda6/0x2a60 net/ipv6/ip6_input.c:438 ip6_input_finish net/ipv6/ip6_input.c:483 [inline] NF_HOOK include/linux/netfilter.h:304 [inline] ip6_input\u002B0x15d/0x430 net/ipv6/ip6_input.c:492 ip6_mc_input\u002B0xa7e/0xc80 net/ipv6/ip6_input.c:586 dst_input include/net/dst.h:468 [inline] ip6_rcv_finish\u002B0x5db/0x870 net/ipv6/ip6_input.c:79 NF_HOOK include/linux/netfilter.h:304 [inline] ipv6_rcv\u002B0xda/0x390 net/ipv6/ip6_input.c:310 __netif_receive_skb_one_core net/core/dev.c:5523 [inline] __netif_receive_skb\u002B0x1a6/0x5a0 net/core/dev.c:5637 netif_receive_skb_internal net/core/dev.c:5723 [inline] netif_receive_skb\u002B0x58/0x660 net/core/dev.c:5782 tun_rx_batched\u002B0x83b/0x920 tun_get_user\u002B0x564c/0x6940 drivers/net/tun.c:2002 tun_chr_write_iter\u002B0x3af/0x5d0 drivers/net/tun.c:2048 call_write_iter include/linux/fs.h:1985 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write\u002B0x8ef/0x15c0 fs/read_write.c:584 ksys_write\u002B0x20f/0x4c0 fs/read_write.c:637 __do_sys_write fs/read_write.c:649 [inline] __se_sys_write fs/read_write.c:646 [inline] __x64_sys_write\u002B0x93/0xd0 fs/read_write.c:646 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64\u002B0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe\u002B0x63/0xcd  Uninit was created at: slab_post_alloc_hook\u002B0x12f/0xb70 mm/slab.h:767 slab_alloc_node mm/slub.c:3478 [inline] kmem_cache_alloc_node\u002B0x577/0xa80 mm/slub.c:3523 kmalloc_reserve\u002B0x13d/0x4a0 net/core/skbuff.c:559 __alloc_skb\u002B0x318/0x740 net/core/skbuff.c:650 alloc_skb include/linux/skbuff.h:1286 [inline] alloc_skb_with_frags\u002B0xc8/0xbd0 net/core/skbuff.c:6313 sock_alloc_send_pskb\u002B0xa80/0xbf0 net/core/sock.c:2795 tun_alloc_skb drivers/net/tun.c:1531 [inline] tun_get_user\u002B0x23cf/0x6940 drivers/net/tun.c:1846 tun_chr_write_iter\u002B0x3af/0x5d0 drivers/net/tun.c:2048 call_write_iter include/linux/fs.h:1985 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write\u002B0x8ef/0x15c0 fs/read_write.c:584 ksys_write\u002B0x20f/0x4c0 fs/read_write.c:637 __do_sys_write fs/read_write.c:649 [inline] __se_sys_write fs/read_write.c:646 [inline] __x64_sys_write\u002B0x93/0xd0 fs/read_write.c:646 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64\u002B0x41/0xc0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe\u002B0x63/0xcd  CPU: 0 PID: 4995 Comm: syz-executor153 Not tainted 6.6.0-rc1-syzkaller-00014-ga747acc0b752 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023",
  "published": "2024-03-02T22:15:49Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00241,
  "epssPercentile": 0.15345,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.64-1",
      "fix": "DEBIAN-CVE-2023-52577",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-52577",
      "released": "2024-03-02T22:15:49Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.5.6-1",
      "fix": "DEBIAN-CVE-2023-52577",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-52577",
      "released": "2024-03-02T22:15:49Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.5.6-1",
      "fix": "DEBIAN-CVE-2023-52577",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-52577",
      "released": "2024-03-02T22:15:49Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}