CVE-2023-52679 (GCVE-0-2023-52679)

Vulnerability from cvelistv5 – Published: 2024-05-17 14:24 – Updated: 2026-08-05 09:11
VLAI
Title
of: Fix double free in of_parse_phandle_with_args_map
Summary
In the Linux kernel, the following vulnerability has been resolved: of: Fix double free in of_parse_phandle_with_args_map In of_parse_phandle_with_args_map() the inner loop that iterates through the map entries calls of_node_put(new) to free the reference acquired by the previous iteration of the inner loop. This assumes that the value of "new" is NULL on the first iteration of the inner loop. Make sure that this is true in all iterations of the outer loop by setting "new" to NULL after its value is assigned to "cur". Extend the unittest to detect the double free and add an additional test case that actually triggers this path.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa , < 26b4d702c44f9e5cf3c5c001ae619a4a001889db (git)
Affected: bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa , < a0a061151a6200c13149dbcdb6c065203c8425d2 (git)
Affected: bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa , < d5f490343c77e6708b6c4aa7dbbfbcbb9546adea (git)
Affected: bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa , < 4541004084527ce9e95a818ebbc4e6b293ffca21 (git)
Affected: bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa , < b9d760dae5b10e73369b769073525acd7b3be2bd (git)
Affected: bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa , < b64d09a4e8596f76d27f4b4a90a1cf6baf6a82f8 (git)
Affected: bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa , < cafa992134124e785609a406da4ff2b54052aff7 (git)
Affected: bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa , < 4dde83569832f9377362e50f7748463340c5db6b (git)
Create a notification for this product.
Linux Linux Affected: 4.17
Unaffected: 0 , < 4.17 (semver)
Unaffected: 4.19.306 , ≤ 4.19.* (semver)
Unaffected: 5.4.268 , ≤ 5.4.* (semver)
Unaffected: 5.10.209 , ≤ 5.10.* (semver)
Unaffected: 5.15.148 , ≤ 5.15.* (semver)
Unaffected: 6.1.75 , ≤ 6.1.* (semver)
Unaffected: 6.6.14 , ≤ 6.6.* (semver)
Unaffected: 6.7.2 , ≤ 6.7.* (semver)
Unaffected: 6.8 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-52679",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-20T14:12:32.015310Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:23:37.773Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T23:11:34.539Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/26b4d702c44f9e5cf3c5c001ae619a4a001889db"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/a0a061151a6200c13149dbcdb6c065203c8425d2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/d5f490343c77e6708b6c4aa7dbbfbcbb9546adea"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/4541004084527ce9e95a818ebbc4e6b293ffca21"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/b9d760dae5b10e73369b769073525acd7b3be2bd"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/b64d09a4e8596f76d27f4b4a90a1cf6baf6a82f8"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/cafa992134124e785609a406da4ff2b54052aff7"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/4dde83569832f9377362e50f7748463340c5db6b"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/of/base.c",
            "drivers/of/unittest-data/tests-phandle.dtsi",
            "drivers/of/unittest.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "26b4d702c44f9e5cf3c5c001ae619a4a001889db",
              "status": "affected",
              "version": "bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa",
              "versionType": "git"
            },
            {
              "lessThan": "a0a061151a6200c13149dbcdb6c065203c8425d2",
              "status": "affected",
              "version": "bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa",
              "versionType": "git"
            },
            {
              "lessThan": "d5f490343c77e6708b6c4aa7dbbfbcbb9546adea",
              "status": "affected",
              "version": "bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa",
              "versionType": "git"
            },
            {
              "lessThan": "4541004084527ce9e95a818ebbc4e6b293ffca21",
              "status": "affected",
              "version": "bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa",
              "versionType": "git"
            },
            {
              "lessThan": "b9d760dae5b10e73369b769073525acd7b3be2bd",
              "status": "affected",
              "version": "bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa",
              "versionType": "git"
            },
            {
              "lessThan": "b64d09a4e8596f76d27f4b4a90a1cf6baf6a82f8",
              "status": "affected",
              "version": "bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa",
              "versionType": "git"
            },
            {
              "lessThan": "cafa992134124e785609a406da4ff2b54052aff7",
              "status": "affected",
              "version": "bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa",
              "versionType": "git"
            },
            {
              "lessThan": "4dde83569832f9377362e50f7748463340c5db6b",
              "status": "affected",
              "version": "bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/of/base.c",
            "drivers/of/unittest-data/tests-phandle.dtsi",
            "drivers/of/unittest.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.17"
            },
            {
              "lessThan": "4.17",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.306",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.268",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.148",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.75",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.14",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.7.*",
              "status": "unaffected",
              "version": "6.7.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.8",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.306",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.268",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.209",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.148",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.75",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.14",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.7.2",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.8",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nof: Fix double free in of_parse_phandle_with_args_map\n\nIn of_parse_phandle_with_args_map() the inner loop that\niterates through the map entries calls of_node_put(new)\nto free the reference acquired by the previous iteration\nof the inner loop. This assumes that the value of \"new\" is\nNULL on the first iteration of the inner loop.\n\nMake sure that this is true in all iterations of the outer\nloop by setting \"new\" to NULL after its value is assigned to \"cur\".\n\nExtend the unittest to detect the double free and add an additional\ntest case that actually triggers this path."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The only production caller is of_get_named_gpiod_flags() in gpiolib-of.c during local Device Tree GPIO phandle/nexus parsing; this is not reachable via network packets, adjacent-link protocols, or a physical bus endpoint.\nAC:L - On a system whose live DT contains a multi-level gpio-map nexus chain, a single GPIO lookup deterministically takes the buggy outer/inner-loop path and double-puts the intermediate node, with no race or other attacker-uncontrollable timing.\nPR:L - Under the higher-severity local interpretation, an unprivileged local user on an affected OF/OF_DYNAMIC system (e.g., embedded boards using gpio-map nexus/overlays) can benefit from the resulting of_node refcount corruption/UAF without needing init-namespace root or user-namespace capabilities.\nUI:N - No separate victim action is required; GPIO phandle parsing runs during driver/OF consumer lookup on the crafted or already-present nexus topology without the attacker needing another user to open a file or click anything.\nS:U - Impact is confined to host-kernel of_node lifetime and heap corruption within the same security authority; this is not a VM escape, IOMMU bypass, or other cross-boundary break.\nC:H - The bug is a double of_node_put/refcount UAF on device_node objects, which per kernel CVSS guidance enables heap reuse and arbitrary kernel memory disclosure.\nI:H - Double-free/UAF of of_node heap objects can be leveraged via heap spraying for overlapping objects and control-flow hijacking, enabling arbitrary kernel write/code execution.\nA:H - The unbalanced of_node_put path causes refcount underflow, of_node_release errors, and kernel oops/panic even when not fully exploited for code execution."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:11:00.798Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/26b4d702c44f9e5cf3c5c001ae619a4a001889db"
        },
        {
          "url": "https://git.kernel.org/stable/c/a0a061151a6200c13149dbcdb6c065203c8425d2"
        },
        {
          "url": "https://git.kernel.org/stable/c/d5f490343c77e6708b6c4aa7dbbfbcbb9546adea"
        },
        {
          "url": "https://git.kernel.org/stable/c/4541004084527ce9e95a818ebbc4e6b293ffca21"
        },
        {
          "url": "https://git.kernel.org/stable/c/b9d760dae5b10e73369b769073525acd7b3be2bd"
        },
        {
          "url": "https://git.kernel.org/stable/c/b64d09a4e8596f76d27f4b4a90a1cf6baf6a82f8"
        },
        {
          "url": "https://git.kernel.org/stable/c/cafa992134124e785609a406da4ff2b54052aff7"
        },
        {
          "url": "https://git.kernel.org/stable/c/4dde83569832f9377362e50f7748463340c5db6b"
        }
      ],
      "title": "of: Fix double free in of_parse_phandle_with_args_map",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-52679",
    "datePublished": "2024-05-17T14:24:43.380Z",
    "dateReserved": "2024-03-07T14:49:46.887Z",
    "dateUpdated": "2026-08-05T09:11:00.798Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-52679",
      "date": "2026-08-06",
      "epss": "0.00246",
      "percentile": "0.15815"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.17\", \"versionEndExcluding\": \"4.19.306\", \"matchCriteriaId\": \"FC4D8B3F-449D-4567-97A5-EBCD7F5B6877\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.20\", \"versionEndExcluding\": \"5.4.268\", \"matchCriteriaId\": \"991BF737-6083-429B-ACD5-FB27D4143E2F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.5\", \"versionEndExcluding\": \"5.10.209\", \"matchCriteriaId\": \"74979A03-4B10-4815-AE3E-C8C0D2FDAA39\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.11\", \"versionEndExcluding\": \"5.15.148\", \"matchCriteriaId\": \"2ED0CDB9-61B0-408E-B2A8-5199107F7868\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.16\", \"versionEndExcluding\": \"6.1.75\", \"matchCriteriaId\": \"070D0ED3-90D0-4F95-B1FF-57D7F46F332D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.2\", \"versionEndExcluding\": \"6.6.14\", \"matchCriteriaId\": \"5C6B50A6-3D8B-4CE2-BDCC-A098609CBA14\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"6.7\", \"versionEndExcluding\": \"6.7.2\", \"matchCriteriaId\": \"7229C448-E0C9-488B-8939-36BA5254065E\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nof: Fix double free in of_parse_phandle_with_args_map\\n\\nIn of_parse_phandle_with_args_map() the inner loop that\\niterates through the map entries calls of_node_put(new)\\nto free the reference acquired by the previous iteration\\nof the inner loop. This assumes that the value of \\\"new\\\" is\\nNULL on the first iteration of the inner loop.\\n\\nMake sure that this is true in all iterations of the outer\\nloop by setting \\\"new\\\" to NULL after its value is assigned to \\\"cur\\\".\\n\\nExtend the unittest to detect the double free and add an additional\\ntest case that actually triggers this path.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: of: Solucionado double free en of_parse_phandle_with_args_map En of_parse_phandle_with_args_map() el bucle interno que itera por las entradas del mapa llama a of_node_put(new) para liberar la referencia adquirida por la iteraci\\u00f3n anterior del bucle interno . Esto supone que el valor de \\\"nuevo\\\" es NULL en la primera iteraci\\u00f3n del bucle interno. Aseg\\u00farese de que esto sea cierto en todas las iteraciones del bucle externo estableciendo \\\"nuevo\\\" en NULL despu\\u00e9s de que su valor se asigne a \\\"cur\\\". Ampl\\u00ede la prueba unitaria para detectar el doble free y agregue un caso de prueba adicional que realmente active esta ruta.\"}]",
      "id": "CVE-2023-52679",
      "lastModified": "2025-01-10T17:43:16.480",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 7.8, \"baseSeverity\": \"HIGH\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 5.9}]}",
      "published": "2024-05-17T15:15:19.207",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/26b4d702c44f9e5cf3c5c001ae619a4a001889db\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/4541004084527ce9e95a818ebbc4e6b293ffca21\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/4dde83569832f9377362e50f7748463340c5db6b\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/a0a061151a6200c13149dbcdb6c065203c8425d2\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/b64d09a4e8596f76d27f4b4a90a1cf6baf6a82f8\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/b9d760dae5b10e73369b769073525acd7b3be2bd\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/cafa992134124e785609a406da4ff2b54052aff7\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/d5f490343c77e6708b6c4aa7dbbfbcbb9546adea\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/26b4d702c44f9e5cf3c5c001ae619a4a001889db\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/4541004084527ce9e95a818ebbc4e6b293ffca21\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/4dde83569832f9377362e50f7748463340c5db6b\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/a0a061151a6200c13149dbcdb6c065203c8425d2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/b64d09a4e8596f76d27f4b4a90a1cf6baf6a82f8\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/b9d760dae5b10e73369b769073525acd7b3be2bd\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/cafa992134124e785609a406da4ff2b54052aff7\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/d5f490343c77e6708b6c4aa7dbbfbcbb9546adea\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\"]}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Analyzed",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-415\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-52679\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-05-17T15:15:19.207\",\"lastModified\":\"2026-08-04T10:18:37.730\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nof: Fix double free in of_parse_phandle_with_args_map\\n\\nIn of_parse_phandle_with_args_map() the inner loop that\\niterates through the map entries calls of_node_put(new)\\nto free the reference acquired by the previous iteration\\nof the inner loop. This assumes that the value of \\\"new\\\" is\\nNULL on the first iteration of the inner loop.\\n\\nMake sure that this is true in all iterations of the outer\\nloop by setting \\\"new\\\" to NULL after its value is assigned to \\\"cur\\\".\\n\\nExtend the unittest to detect the double free and add an additional\\ntest case that actually triggers this path.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: of: Solucionado double free en of_parse_phandle_with_args_map En of_parse_phandle_with_args_map() el bucle interno que itera por las entradas del mapa llama a of_node_put(new) para liberar la referencia adquirida por la iteraci\u00f3n anterior del bucle interno . Esto supone que el valor de \\\"nuevo\\\" es NULL en la primera iteraci\u00f3n del bucle interno. Aseg\u00farese de que esto sea cierto en todas las iteraciones del bucle externo estableciendo \\\"nuevo\\\" en NULL despu\u00e9s de que su valor se asigne a \\\"cur\\\". Ampl\u00ede la prueba unitaria para detectar el doble free y agregue un caso de prueba adicional que realmente active esta ruta.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/of/base.c\",\"drivers/of/unittest-data/tests-phandle.dtsi\",\"drivers/of/unittest.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa\",\"lessThan\":\"26b4d702c44f9e5cf3c5c001ae619a4a001889db\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa\",\"lessThan\":\"a0a061151a6200c13149dbcdb6c065203c8425d2\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa\",\"lessThan\":\"d5f490343c77e6708b6c4aa7dbbfbcbb9546adea\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa\",\"lessThan\":\"4541004084527ce9e95a818ebbc4e6b293ffca21\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa\",\"lessThan\":\"b9d760dae5b10e73369b769073525acd7b3be2bd\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa\",\"lessThan\":\"b64d09a4e8596f76d27f4b4a90a1cf6baf6a82f8\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa\",\"lessThan\":\"cafa992134124e785609a406da4ff2b54052aff7\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa\",\"lessThan\":\"4dde83569832f9377362e50f7748463340c5db6b\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/of/base.c\",\"drivers/of/unittest-data/tests-phandle.dtsi\",\"drivers/of/unittest.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.17\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.17\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.306\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.268\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.209\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.148\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.75\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.14\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.7.2\",\"lessThanOrEqual\":\"6.7.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.8\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-05-20T14:12:32.015310Z\",\"id\":\"CVE-2023-52679\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-415\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.17\",\"versionEndExcluding\":\"4.19.306\",\"matchCriteriaId\":\"FC4D8B3F-449D-4567-97A5-EBCD7F5B6877\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.268\",\"matchCriteriaId\":\"991BF737-6083-429B-ACD5-FB27D4143E2F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.209\",\"matchCriteriaId\":\"74979A03-4B10-4815-AE3E-C8C0D2FDAA39\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.148\",\"matchCriteriaId\":\"2ED0CDB9-61B0-408E-B2A8-5199107F7868\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.75\",\"matchCriteriaId\":\"070D0ED3-90D0-4F95-B1FF-57D7F46F332D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.14\",\"matchCriteriaId\":\"5C6B50A6-3D8B-4CE2-BDCC-A098609CBA14\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.7.2\",\"matchCriteriaId\":\"7229C448-E0C9-488B-8939-36BA5254065E\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/26b4d702c44f9e5cf3c5c001ae619a4a001889db\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/4541004084527ce9e95a818ebbc4e6b293ffca21\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/4dde83569832f9377362e50f7748463340c5db6b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a0a061151a6200c13149dbcdb6c065203c8425d2\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b64d09a4e8596f76d27f4b4a90a1cf6baf6a82f8\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b9d760dae5b10e73369b769073525acd7b3be2bd\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/cafa992134124e785609a406da4ff2b54052aff7\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d5f490343c77e6708b6c4aa7dbbfbcbb9546adea\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/26b4d702c44f9e5cf3c5c001ae619a4a001889db\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/4541004084527ce9e95a818ebbc4e6b293ffca21\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/4dde83569832f9377362e50f7748463340c5db6b\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/a0a061151a6200c13149dbcdb6c065203c8425d2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b64d09a4e8596f76d27f4b4a90a1cf6baf6a82f8\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b9d760dae5b10e73369b769073525acd7b3be2bd\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/cafa992134124e785609a406da4ff2b54052aff7\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d5f490343c77e6708b6c4aa7dbbfbcbb9546adea\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-08-05T03:48:26+00:00",
      "cve": "CVE-2023-52679",
      "id": "CVE-2023-52679",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:fixed": "709",
      "product_status:known_affected": "50",
      "product_status:known_not_affected": "22",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: of: Fix double free in of_parse_phandle_with_args_map",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-52679.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-05T01:06:29Z",
      "cve": "CVE-2023-52679",
      "id": "CVE-2023-52679",
      "initial_release_date": "2024-05-21T02:02:03Z",
      "product_status:known_affected": "446",
      "product_status:known_not_affected": "117",
      "product_status:recommended": "695",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-52679",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-52679.json",
      "version": "94"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/26b4d702c44f9e5cf3c5c001ae619a4a001889db\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/a0a061151a6200c13149dbcdb6c065203c8425d2\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/d5f490343c77e6708b6c4aa7dbbfbcbb9546adea\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/4541004084527ce9e95a818ebbc4e6b293ffca21\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/b9d760dae5b10e73369b769073525acd7b3be2bd\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/b64d09a4e8596f76d27f4b4a90a1cf6baf6a82f8\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/cafa992134124e785609a406da4ff2b54052aff7\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/4dde83569832f9377362e50f7748463340c5db6b\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T23:11:34.539Z\"}}, {\"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-52679\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-05-20T14:12:32.015310Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-05-23T19:01:24.779Z\"}, \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"title\": \"of: Fix double free in of_parse_phandle_with_args_map\", \"metrics\": [{\"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 7.8, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"AV:L - The only production caller is of_get_named_gpiod_flags() in gpiolib-of.c during local Device Tree GPIO phandle/nexus parsing; this is not reachable via network packets, adjacent-link protocols, or a physical bus endpoint.\\nAC:L - On a system whose live DT contains a multi-level gpio-map nexus chain, a single GPIO lookup deterministically takes the buggy outer/inner-loop path and double-puts the intermediate node, with no race or other attacker-uncontrollable timing.\\nPR:L - Under the higher-severity local interpretation, an unprivileged local user on an affected OF/OF_DYNAMIC system (e.g., embedded boards using gpio-map nexus/overlays) can benefit from the resulting of_node refcount corruption/UAF without needing init-namespace root or user-namespace capabilities.\\nUI:N - No separate victim action is required; GPIO phandle parsing runs during driver/OF consumer lookup on the crafted or already-present nexus topology without the attacker needing another user to open a file or click anything.\\nS:U - Impact is confined to host-kernel of_node lifetime and heap corruption within the same security authority; this is not a VM escape, IOMMU bypass, or other cross-boundary break.\\nC:H - The bug is a double of_node_put/refcount UAF on device_node objects, which per kernel CVSS guidance enables heap reuse and arbitrary kernel memory disclosure.\\nI:H - Double-free/UAF of of_node heap objects can be leveraged via heap spraying for overlapping objects and control-flow hijacking, enabling arbitrary kernel write/code execution.\\nA:H - The unbalanced of_node_put path causes refcount underflow, of_node_release errors, and kernel oops/panic even when not fully exploited for code execution.\"}]}], \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa\", \"lessThan\": \"26b4d702c44f9e5cf3c5c001ae619a4a001889db\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa\", \"lessThan\": \"a0a061151a6200c13149dbcdb6c065203c8425d2\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa\", \"lessThan\": \"d5f490343c77e6708b6c4aa7dbbfbcbb9546adea\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa\", \"lessThan\": \"4541004084527ce9e95a818ebbc4e6b293ffca21\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa\", \"lessThan\": \"b9d760dae5b10e73369b769073525acd7b3be2bd\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa\", \"lessThan\": \"b64d09a4e8596f76d27f4b4a90a1cf6baf6a82f8\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa\", \"lessThan\": \"cafa992134124e785609a406da4ff2b54052aff7\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"bd6f2fd5a1d52198468c5cdc3c2472362dff5aaa\", \"lessThan\": \"4dde83569832f9377362e50f7748463340c5db6b\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/of/base.c\", \"drivers/of/unittest-data/tests-phandle.dtsi\", \"drivers/of/unittest.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.17\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"4.17\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.19.306\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.268\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.209\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.148\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.75\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.14\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.7.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.7.*\"}, {\"status\": \"unaffected\", \"version\": \"6.8\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/of/base.c\", \"drivers/of/unittest-data/tests-phandle.dtsi\", \"drivers/of/unittest.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/26b4d702c44f9e5cf3c5c001ae619a4a001889db\"}, {\"url\": \"https://git.kernel.org/stable/c/a0a061151a6200c13149dbcdb6c065203c8425d2\"}, {\"url\": \"https://git.kernel.org/stable/c/d5f490343c77e6708b6c4aa7dbbfbcbb9546adea\"}, {\"url\": \"https://git.kernel.org/stable/c/4541004084527ce9e95a818ebbc4e6b293ffca21\"}, {\"url\": \"https://git.kernel.org/stable/c/b9d760dae5b10e73369b769073525acd7b3be2bd\"}, {\"url\": \"https://git.kernel.org/stable/c/b64d09a4e8596f76d27f4b4a90a1cf6baf6a82f8\"}, {\"url\": \"https://git.kernel.org/stable/c/cafa992134124e785609a406da4ff2b54052aff7\"}, {\"url\": \"https://git.kernel.org/stable/c/4dde83569832f9377362e50f7748463340c5db6b\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nof: Fix double free in of_parse_phandle_with_args_map\\n\\nIn of_parse_phandle_with_args_map() the inner loop that\\niterates through the map entries calls of_node_put(new)\\nto free the reference acquired by the previous iteration\\nof the inner loop. This assumes that the value of \\\"new\\\" is\\nNULL on the first iteration of the inner loop.\\n\\nMake sure that this is true in all iterations of the outer\\nloop by setting \\\"new\\\" to NULL after its value is assigned to \\\"cur\\\".\\n\\nExtend the unittest to detect the double free and add an additional\\ntest case that actually triggers this path.\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.306\", \"versionStartIncluding\": \"4.17\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.268\", \"versionStartIncluding\": \"4.17\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.209\", \"versionStartIncluding\": \"4.17\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.148\", \"versionStartIncluding\": \"4.17\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.75\", \"versionStartIncluding\": \"4.17\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.14\", \"versionStartIncluding\": \"4.17\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.7.2\", \"versionStartIncluding\": \"4.17\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.8\", \"versionStartIncluding\": \"4.17\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2026-08-05T09:11:00.798Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2023-52679\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-05T09:11:00.798Z\", \"dateReserved\": \"2024-03-07T14:49:46.887Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-05-17T14:24:43.380Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.