CVE-2023-52462
mediumpriority · track · 22EPSS 0.002 · 13 %ileDEEURUUSEPSS · scored 2026-10-26
In the Linux kernel, the following vulnerability has been resolved: bpf: fix check for attempt to corrupt spilled pointer When register is spilled onto a stack as a 1/2/4-byte register, we set slot_type[BPF_REG_SIZE - 1] (plus potentially few more below it, depending on actual spill size). So to check if some stack slot has spilled register we need to consult slot_type[7], not slot_type[0]. To avoid the need to remember and double-check this in the future, just use is_spilled_reg() helper.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (76)
Products and version ranges known to be affected.
- IBM Business Automation Workflow 24.0.0all versionscert_bundDEcpe:/a:ibm:business_automation_workflow:24.0.0
advisories (1)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2024-0475Linux-Kernel: Mehrere Schwachstellen ermöglichen Denial of Service und unspezifische AngriffeDeutsch2024-02-25csaf · cert_bundDE
Ein lokaler Angreifer kann mehrere Schwachstellen im Linux-Kernel ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen oder einen nicht spezifizierten Angriff durchzuführen.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (22)
External citations — patches, advisories, analysis.
- https://access.redhat.com/security/cve/cve-2023-52462cnnvd
- https://cxsecurity.com/cveshow/CVE-2023-52462/cnnvd
- https://git.kernel.org/stable/c/2757f17972d87773b3677777f5682510f13c66efcnnvd
- https://git.kernel.org/stable/c/40617d45ea05535105e202a8a819e388a2b1f036cnnvd
- https://git.kernel.org/stable/c/67e6707f07354ed1acb4e65552e97c60cf9d69cfcnnvd
- https://git.kernel.org/stable/c/8dc15b0670594543c356567a1a45b0182ec63174cnnvd
- https://git.kernel.org/stable/c/ab125ed3ec1c10ccc36bc98c7a4256ad114a3daecnnvd
- https://git.kernel.org/stable/c/fc3e3c50a0a4cac1463967c110686189e4a59104cnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan