GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2023-52774 (GCVE-0-2023-52774)

Vulnerability from cvelistv5 – Published: 2024-05-21 15:30 – Updated: 2026-05-11 19:32
VLAI
Title
s390/dasd: protect device queue against concurrent access
Summary
In the Linux kernel, the following vulnerability has been resolved: s390/dasd: protect device queue against concurrent access In dasd_profile_start() the amount of requests on the device queue are counted. The access to the device queue is unprotected against concurrent access. With a lot of parallel I/O, especially with alias devices enabled, the device queue can change while dasd_profile_start() is accessing the queue. In the worst case this leads to a kernel panic due to incorrect pointer accesses. Fix this by taking the device lock before accessing the queue and counting the requests. Additionally the check for a valid profile data pointer can be done earlier to avoid unnecessary locking in a hot path.
Severity
No CVSS data available.
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-09-10 15:36 UTC
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 4fa52aa7a82f9226b3874a69816bda3af821f002 , < ebdc569a07a3e8dbe66b4184922ad6f88ac0b96f (git)
Affected: 4fa52aa7a82f9226b3874a69816bda3af821f002 , < f75617cc8df4155374132f0b500b0b3ebb967458 (git)
Affected: 4fa52aa7a82f9226b3874a69816bda3af821f002 , < f1ac7789406e2ca9ac51c41ad2daa597f47bdd4d (git)
Affected: 4fa52aa7a82f9226b3874a69816bda3af821f002 , < c841de6247e94e07566d57163d3c0d8b29278f7a (git)
Affected: 4fa52aa7a82f9226b3874a69816bda3af821f002 , < 6062c527d0403cef27c54b91ac8390c3a497b250 (git)
Affected: 4fa52aa7a82f9226b3874a69816bda3af821f002 , < dc96fde8fcb2b896fd6c64802a7f4ece2e69b0be (git)
Affected: 4fa52aa7a82f9226b3874a69816bda3af821f002 , < 9372aab5d0ff621ea203c8c603e7e5f75e888240 (git)
Affected: 4fa52aa7a82f9226b3874a69816bda3af821f002 , < db46cd1e0426f52999d50fa72cfa97fa39952885 (git)
guessed Create a notification for this product.
Linux Linux Affected: 3.1
Unaffected: 0 , < 3.1 (semver)
Unaffected: 4.14.332 , ≤ 4.14.* (semver)
Unaffected: 4.19.301 , ≤ 4.19.* (semver)
Unaffected: 5.4.263 , ≤ 5.4.* (semver)
Unaffected: 5.10.203 , ≤ 5.10.* (semver)
Unaffected: 5.15.141 , ≤ 5.15.* (semver)
Unaffected: 6.1.65 , ≤ 6.1.* (semver)
Unaffected: 6.6.4 , ≤ 6.6.* (semver)
Unaffected: 6.7 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T23:11:35.549Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/ebdc569a07a3e8dbe66b4184922ad6f88ac0b96f"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/f75617cc8df4155374132f0b500b0b3ebb967458"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/f1ac7789406e2ca9ac51c41ad2daa597f47bdd4d"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/c841de6247e94e07566d57163d3c0d8b29278f7a"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/6062c527d0403cef27c54b91ac8390c3a497b250"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/dc96fde8fcb2b896fd6c64802a7f4ece2e69b0be"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/9372aab5d0ff621ea203c8c603e7e5f75e888240"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/db46cd1e0426f52999d50fa72cfa97fa39952885"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-52774",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T15:36:56.558292Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:32:55.198Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/s390/block/dasd.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "ebdc569a07a3e8dbe66b4184922ad6f88ac0b96f",
              "status": "affected",
              "version": "4fa52aa7a82f9226b3874a69816bda3af821f002",
              "versionType": "git"
            },
            {
              "lessThan": "f75617cc8df4155374132f0b500b0b3ebb967458",
              "status": "affected",
              "version": "4fa52aa7a82f9226b3874a69816bda3af821f002",
              "versionType": "git"
            },
            {
              "lessThan": "f1ac7789406e2ca9ac51c41ad2daa597f47bdd4d",
              "status": "affected",
              "version": "4fa52aa7a82f9226b3874a69816bda3af821f002",
              "versionType": "git"
            },
            {
              "lessThan": "c841de6247e94e07566d57163d3c0d8b29278f7a",
              "status": "affected",
              "version": "4fa52aa7a82f9226b3874a69816bda3af821f002",
              "versionType": "git"
            },
            {
              "lessThan": "6062c527d0403cef27c54b91ac8390c3a497b250",
              "status": "affected",
              "version": "4fa52aa7a82f9226b3874a69816bda3af821f002",
              "versionType": "git"
            },
            {
              "lessThan": "dc96fde8fcb2b896fd6c64802a7f4ece2e69b0be",
              "status": "affected",
              "version": "4fa52aa7a82f9226b3874a69816bda3af821f002",
              "versionType": "git"
            },
            {
              "lessThan": "9372aab5d0ff621ea203c8c603e7e5f75e888240",
              "status": "affected",
              "version": "4fa52aa7a82f9226b3874a69816bda3af821f002",
              "versionType": "git"
            },
            {
              "lessThan": "db46cd1e0426f52999d50fa72cfa97fa39952885",
              "status": "affected",
              "version": "4fa52aa7a82f9226b3874a69816bda3af821f002",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/s390/block/dasd.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.1"
            },
            {
              "lessThan": "3.1",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.332",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.301",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.263",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.203",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.141",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.65",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.7",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.332",
                  "versionStartIncluding": "3.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.301",
                  "versionStartIncluding": "3.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.263",
                  "versionStartIncluding": "3.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.203",
                  "versionStartIncluding": "3.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.141",
                  "versionStartIncluding": "3.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.65",
                  "versionStartIncluding": "3.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.4",
                  "versionStartIncluding": "3.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.7",
                  "versionStartIncluding": "3.1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/dasd: protect device queue against concurrent access\n\nIn dasd_profile_start() the amount of requests on the device queue are\ncounted. The access to the device queue is unprotected against\nconcurrent access. With a lot of parallel I/O, especially with alias\ndevices enabled, the device queue can change while dasd_profile_start()\nis accessing the queue. In the worst case this leads to a kernel panic\ndue to incorrect pointer accesses.\n\nFix this by taking the device lock before accessing the queue and\ncounting the requests. Additionally the check for a valid profile data\npointer can be done earlier to avoid unnecessary locking in a hot path."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T19:32:52.890Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/ebdc569a07a3e8dbe66b4184922ad6f88ac0b96f"
        },
        {
          "url": "https://git.kernel.org/stable/c/f75617cc8df4155374132f0b500b0b3ebb967458"
        },
        {
          "url": "https://git.kernel.org/stable/c/f1ac7789406e2ca9ac51c41ad2daa597f47bdd4d"
        },
        {
          "url": "https://git.kernel.org/stable/c/c841de6247e94e07566d57163d3c0d8b29278f7a"
        },
        {
          "url": "https://git.kernel.org/stable/c/6062c527d0403cef27c54b91ac8390c3a497b250"
        },
        {
          "url": "https://git.kernel.org/stable/c/dc96fde8fcb2b896fd6c64802a7f4ece2e69b0be"
        },
        {
          "url": "https://git.kernel.org/stable/c/9372aab5d0ff621ea203c8c603e7e5f75e888240"
        },
        {
          "url": "https://git.kernel.org/stable/c/db46cd1e0426f52999d50fa72cfa97fa39952885"
        }
      ],
      "title": "s390/dasd: protect device queue against concurrent access",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-52774",
    "datePublished": "2024-05-21T15:30:55.593Z",
    "dateReserved": "2024-05-21T15:19:24.239Z",
    "dateUpdated": "2026-05-11T19:32:52.890Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-52774",
      "date": "2026-09-16",
      "epss": "0.0024",
      "percentile": "0.15246"
    },
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\ns390/dasd: protect device queue against concurrent access\\n\\nIn dasd_profile_start() the amount of requests on the device queue are\\ncounted. The access to the device queue is unprotected against\\nconcurrent access. With a lot of parallel I/O, especially with alias\\ndevices enabled, the device queue can change while dasd_profile_start()\\nis accessing the queue. In the worst case this leads to a kernel panic\\ndue to incorrect pointer accesses.\\n\\nFix this by taking the device lock before accessing the queue and\\ncounting the requests. Additionally the check for a valid profile data\\npointer can be done earlier to avoid unnecessary locking in a hot path.\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: s390/dasd: protege la cola de dispositivos contra el acceso concurrente. En dasd_profile_start() se cuenta la cantidad de solicitudes en la cola de dispositivos. El acceso a la cola de dispositivos no est\\u00e1 protegido contra el acceso simult\\u00e1neo. Con muchas E/S paralelas, especialmente con dispositivos alias habilitados, la cola de dispositivos puede cambiar mientras dasd_profile_start() accede a la cola. En el peor de los casos, esto provoca un p\\u00e1nico en el kernel debido a accesos incorrectos al puntero. Solucione este problema bloqueando el dispositivo antes de acceder a la cola y contando las solicitudes. Adem\\u00e1s, la verificaci\\u00f3n de un puntero de datos de perfil v\\u00e1lido se puede realizar antes para evitar bloqueos innecesarios en una ruta activa.\"}]",
      "id": "CVE-2023-52774",
      "lastModified": "2024-11-21T08:40:33.640",
      "published": "2024-05-21T16:15:16.537",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/6062c527d0403cef27c54b91ac8390c3a497b250\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/9372aab5d0ff621ea203c8c603e7e5f75e888240\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/c841de6247e94e07566d57163d3c0d8b29278f7a\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/db46cd1e0426f52999d50fa72cfa97fa39952885\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/dc96fde8fcb2b896fd6c64802a7f4ece2e69b0be\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/ebdc569a07a3e8dbe66b4184922ad6f88ac0b96f\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/f1ac7789406e2ca9ac51c41ad2daa597f47bdd4d\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/f75617cc8df4155374132f0b500b0b3ebb967458\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}, {\"url\": \"https://git.kernel.org/stable/c/6062c527d0403cef27c54b91ac8390c3a497b250\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/9372aab5d0ff621ea203c8c603e7e5f75e888240\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/c841de6247e94e07566d57163d3c0d8b29278f7a\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/db46cd1e0426f52999d50fa72cfa97fa39952885\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/dc96fde8fcb2b896fd6c64802a7f4ece2e69b0be\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/ebdc569a07a3e8dbe66b4184922ad6f88ac0b96f\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/f1ac7789406e2ca9ac51c41ad2daa597f47bdd4d\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://git.kernel.org/stable/c/f75617cc8df4155374132f0b500b0b3ebb967458\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Awaiting Analysis"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-52774\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-05-21T16:15:16.537\",\"lastModified\":\"2026-06-17T06:43:33.023\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ns390/dasd: protect device queue against concurrent access\\n\\nIn dasd_profile_start() the amount of requests on the device queue are\\ncounted. The access to the device queue is unprotected against\\nconcurrent access. With a lot of parallel I/O, especially with alias\\ndevices enabled, the device queue can change while dasd_profile_start()\\nis accessing the queue. In the worst case this leads to a kernel panic\\ndue to incorrect pointer accesses.\\n\\nFix this by taking the device lock before accessing the queue and\\ncounting the requests. Additionally the check for a valid profile data\\npointer can be done earlier to avoid unnecessary locking in a hot path.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: s390/dasd: protege la cola de dispositivos contra el acceso concurrente. En dasd_profile_start() se cuenta la cantidad de solicitudes en la cola de dispositivos. El acceso a la cola de dispositivos no est\u00e1 protegido contra el acceso simult\u00e1neo. Con muchas E/S paralelas, especialmente con dispositivos alias habilitados, la cola de dispositivos puede cambiar mientras dasd_profile_start() accede a la cola. En el peor de los casos, esto provoca un p\u00e1nico en el kernel debido a accesos incorrectos al puntero. Solucione este problema bloqueando el dispositivo antes de acceder a la cola y contando las solicitudes. Adem\u00e1s, la verificaci\u00f3n de un puntero de datos de perfil v\u00e1lido se puede realizar antes para evitar bloqueos innecesarios en una ruta activa.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/s390/block/dasd.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4fa52aa7a82f9226b3874a69816bda3af821f002\",\"lessThan\":\"ebdc569a07a3e8dbe66b4184922ad6f88ac0b96f\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4fa52aa7a82f9226b3874a69816bda3af821f002\",\"lessThan\":\"f75617cc8df4155374132f0b500b0b3ebb967458\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4fa52aa7a82f9226b3874a69816bda3af821f002\",\"lessThan\":\"f1ac7789406e2ca9ac51c41ad2daa597f47bdd4d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4fa52aa7a82f9226b3874a69816bda3af821f002\",\"lessThan\":\"c841de6247e94e07566d57163d3c0d8b29278f7a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4fa52aa7a82f9226b3874a69816bda3af821f002\",\"lessThan\":\"6062c527d0403cef27c54b91ac8390c3a497b250\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4fa52aa7a82f9226b3874a69816bda3af821f002\",\"lessThan\":\"dc96fde8fcb2b896fd6c64802a7f4ece2e69b0be\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4fa52aa7a82f9226b3874a69816bda3af821f002\",\"lessThan\":\"9372aab5d0ff621ea203c8c603e7e5f75e888240\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4fa52aa7a82f9226b3874a69816bda3af821f002\",\"lessThan\":\"db46cd1e0426f52999d50fa72cfa97fa39952885\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/s390/block/dasd.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"3.1\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"3.1\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.14.332\",\"lessThanOrEqual\":\"4.14.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.301\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.263\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.203\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.141\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.65\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.4\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.7\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-09-10T15:36:56.558292Z\",\"id\":\"CVE-2023-52774\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-476\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.1\",\"versionEndExcluding\":\"4.14.332\",\"matchCriteriaId\":\"F93028F2-A87E-4D02-B105-ACA84122E4B1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.15\",\"versionEndExcluding\":\"4.19.301\",\"matchCriteriaId\":\"84FC0D33-2BAB-4DA5-B043-EEB9F3117CC9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.263\",\"matchCriteriaId\":\"3C7DBDCA-29BA-4EC8-A19B-9019952CB3C6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.203\",\"matchCriteriaId\":\"2CC5014B-B48F-4824-8797-97F8EB701DC7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.141\",\"matchCriteriaId\":\"9B851604-748F-41E0-8B31-403CEA01E99D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.65\",\"matchCriteriaId\":\"8A758252-8804-4E23-91B5-E0B5BAC3E15A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.4\",\"matchCriteriaId\":\"86E0B7DD-2E2D-461D-996C-8E941AFE171F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.7:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"3A0038DE-E183-4958-A6E3-CE3821FEAFBF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.7:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"E31AD4FC-436C-44AB-BCAB-3A0B37F69EE0\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/6062c527d0403cef27c54b91ac8390c3a497b250\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9372aab5d0ff621ea203c8c603e7e5f75e888240\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c841de6247e94e07566d57163d3c0d8b29278f7a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/db46cd1e0426f52999d50fa72cfa97fa39952885\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/dc96fde8fcb2b896fd6c64802a7f4ece2e69b0be\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ebdc569a07a3e8dbe66b4184922ad6f88ac0b96f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f1ac7789406e2ca9ac51c41ad2daa597f47bdd4d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f75617cc8df4155374132f0b500b0b3ebb967458\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6062c527d0403cef27c54b91ac8390c3a497b250\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/9372aab5d0ff621ea203c8c603e7e5f75e888240\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c841de6247e94e07566d57163d3c0d8b29278f7a\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/db46cd1e0426f52999d50fa72cfa97fa39952885\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/dc96fde8fcb2b896fd6c64802a7f4ece2e69b0be\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ebdc569a07a3e8dbe66b4184922ad6f88ac0b96f\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f1ac7789406e2ca9ac51c41ad2daa597f47bdd4d\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f75617cc8df4155374132f0b500b0b3ebb967458\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2025-11-21T10:55:11+00:00",
      "cve": "CVE-2023-52774",
      "id": "CVE-2023-52774",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "198",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: s390/dasd: protect device queue against concurrent access",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-52774.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-29T02:11:32Z",
      "cve": "CVE-2023-52774",
      "id": "CVE-2023-52774",
      "initial_release_date": "2024-05-29T14:19:30Z",
      "product_status:known_affected": "455",
      "product_status:known_not_affected": "31",
      "product_status:recommended": "875",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-52774",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-52774.json",
      "version": "103"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://git.kernel.org/stable/c/ebdc569a07a3e8dbe66b4184922ad6f88ac0b96f\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/f75617cc8df4155374132f0b500b0b3ebb967458\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/f1ac7789406e2ca9ac51c41ad2daa597f47bdd4d\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/c841de6247e94e07566d57163d3c0d8b29278f7a\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/6062c527d0403cef27c54b91ac8390c3a497b250\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/dc96fde8fcb2b896fd6c64802a7f4ece2e69b0be\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/9372aab5d0ff621ea203c8c603e7e5f75e888240\", \"tags\": [\"x_transferred\"]}, {\"url\": \"https://git.kernel.org/stable/c/db46cd1e0426f52999d50fa72cfa97fa39952885\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T23:11:35.549Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-52774\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-10T15:36:56.558292Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-11T12:42:13.496Z\"}}], \"cna\": {\"title\": \"s390/dasd: protect device queue against concurrent access\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"4fa52aa7a82f9226b3874a69816bda3af821f002\", \"lessThan\": \"ebdc569a07a3e8dbe66b4184922ad6f88ac0b96f\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"4fa52aa7a82f9226b3874a69816bda3af821f002\", \"lessThan\": \"f75617cc8df4155374132f0b500b0b3ebb967458\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"4fa52aa7a82f9226b3874a69816bda3af821f002\", \"lessThan\": \"f1ac7789406e2ca9ac51c41ad2daa597f47bdd4d\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"4fa52aa7a82f9226b3874a69816bda3af821f002\", \"lessThan\": \"c841de6247e94e07566d57163d3c0d8b29278f7a\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"4fa52aa7a82f9226b3874a69816bda3af821f002\", \"lessThan\": \"6062c527d0403cef27c54b91ac8390c3a497b250\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"4fa52aa7a82f9226b3874a69816bda3af821f002\", \"lessThan\": \"dc96fde8fcb2b896fd6c64802a7f4ece2e69b0be\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"4fa52aa7a82f9226b3874a69816bda3af821f002\", \"lessThan\": \"9372aab5d0ff621ea203c8c603e7e5f75e888240\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"4fa52aa7a82f9226b3874a69816bda3af821f002\", \"lessThan\": \"db46cd1e0426f52999d50fa72cfa97fa39952885\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/s390/block/dasd.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"3.1\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"3.1\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.14.332\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.14.*\"}, {\"status\": \"unaffected\", \"version\": \"4.19.301\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.263\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.203\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.141\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.65\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.4\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.7\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/s390/block/dasd.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/ebdc569a07a3e8dbe66b4184922ad6f88ac0b96f\"}, {\"url\": \"https://git.kernel.org/stable/c/f75617cc8df4155374132f0b500b0b3ebb967458\"}, {\"url\": \"https://git.kernel.org/stable/c/f1ac7789406e2ca9ac51c41ad2daa597f47bdd4d\"}, {\"url\": \"https://git.kernel.org/stable/c/c841de6247e94e07566d57163d3c0d8b29278f7a\"}, {\"url\": \"https://git.kernel.org/stable/c/6062c527d0403cef27c54b91ac8390c3a497b250\"}, {\"url\": \"https://git.kernel.org/stable/c/dc96fde8fcb2b896fd6c64802a7f4ece2e69b0be\"}, {\"url\": \"https://git.kernel.org/stable/c/9372aab5d0ff621ea203c8c603e7e5f75e888240\"}, {\"url\": \"https://git.kernel.org/stable/c/db46cd1e0426f52999d50fa72cfa97fa39952885\"}], \"x_generator\": {\"engine\": \"bippy-5f407fcff5a0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\ns390/dasd: protect device queue against concurrent access\\n\\nIn dasd_profile_start() the amount of requests on the device queue are\\ncounted. The access to the device queue is unprotected against\\nconcurrent access. With a lot of parallel I/O, especially with alias\\ndevices enabled, the device queue can change while dasd_profile_start()\\nis accessing the queue. In the worst case this leads to a kernel panic\\ndue to incorrect pointer accesses.\\n\\nFix this by taking the device lock before accessing the queue and\\ncounting the requests. Additionally the check for a valid profile data\\npointer can be done earlier to avoid unnecessary locking in a hot path.\"}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2024-12-19T08:25:42.232Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2023-52774\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-12-19T08:25:42.232Z\", \"dateReserved\": \"2024-05-21T15:19:24.239Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-05-21T15:30:55.593Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.