CVE-2023-51780 Use after free in n/a

High 7.0 Published 25 Dec 2023 Updated 2 Aug 2024

A use-after-free vulnerability in the Linux kernel ATM subsystem allows attackers to execute arbitrary code or escalate privileges via a race condition.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2023-51780?

CVE-2023-51780 is a high-severity use after free vulnerability in Debian Debian Linux, published on 25 Dec 2023. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

An issue was discovered in the Linux kernel before 6.6.8. do_vcc_ioctl in net/atm/ioctl.c has a use-after-free because of a vcc_recvmsg race condition.

Weakness: CWE-416

Which versions are affected by CVE-2023-51780?

It affects 2 products.

Linux distribution packages (10)

`kgraft-patch-SLE12-SP5_Update_51` SUSE:Linux Enterprise Live Patching 12 SP5	All versions	`3-2.1`
`kernel-livepatch-SLE15-SP2_Update_43` SUSE:Linux Enterprise Live Patching 15 SP2	All versions	`3-150200.2.1`
`kernel-livepatch-SLE15-SP2_Update_44` SUSE:Linux Enterprise Live Patching 15 SP2	All versions	`3-150200.2.1`
`kernel-livepatch-SLE15-SP3_Update_39` SUSE:Linux Enterprise Live Patching 15 SP3	All versions	`3-150300.2.1`
`kernel-livepatch-SLE15-SP4_Update_20` SUSE:Linux Enterprise Live Patching 15 SP4	All versions	`3-150400.2.1`
`kernel-livepatch-SLE15-SP5-RT_Update_6` SUSE:Linux Enterprise Live Patching 15 SP5	All versions	`4-150500.2.1`
`kernel-livepatch-SLE15-SP5-RT_Update_8` SUSE:Linux Enterprise Live Patching 15 SP5	All versions	`3-150500.2.1`
`kernel-livepatch-SLE15-SP5_Update_7` SUSE:Linux Enterprise Live Patching 15 SP5	All versions	`3-150500.2.1`
`kernel-livepatch-SLE15-SP5_Update_8` SUSE:Linux Enterprise Live Patching 15 SP5	All versions	`3-150500.2.1`
`kernel-livepatch-SLE15-SP5_Update_9` SUSE:Linux Enterprise Live Patching 15 SP5	All versions	`2-150500.2.1`

Products include Debian Debian Linux, Linux kernel.

How do I fix CVE-2023-51780?

Apply the vendor's patch.

Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.

Is CVE-2023-51780 being exploited?

There is no known exploitation of CVE-2023-51780 in the wild and no public exploit code.

All Debian Debian Linux vulnerabilities

Sources

Also known as AZL-33287, AZL-33345, BELL-CVE-2023-51780, DEBIAN-CVE-2023-51780, GHSA-h76p-mprh-fvmv, SUSE-SU-2024:0620-1 and 5 more.