CVE-2023-52834 atl1c: Work around the DMA RX overflow issue
A flaw in the atl1c network driver causes DMA RX overflow errors, potentially leading to denial of service; kernel maintainers should apply the patch.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-52834?
CVE-2023-52834 is a high-severity denial of service vulnerability in Linux kernel, published on 21 May 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
atl1c: Work around the DMA RX overflow issue
This is based on alx driver commit 881d0327db37 ("net: alx: Work around the DMA RX overflow issue").
The alx and atl1c drivers had RX overflow error which was why a custom allocator was created to avoid certain addresses. The simpler workaround then created for alx driver, but not for atl1c due to lack of tester.
Instead of using a custom allocator, check the allocated skb address and use skb_reserve() to move away from problematic 0x...fc0 address.
Tested on AR8131 on Acer 4540.
Which versions are affected by CVE-2023-52834?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2023-52834?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2023-52834 being exploited?
There is no known exploitation of CVE-2023-52834 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2023-52834, DEBIAN-CVE-2023-52834, GHSA-9qcj-9374-gfhc, ROOT-OS-DEBIAN-11-CVE-2023-52834, UBUNTU-CVE-2023-52834.