CVE-2023-52782

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.0-rc4+

Description The vulnerability is related to the net/mlx5e module in the Linux kernel. It occurs when the metadata index is put in the tracking list before the relevant skb is available in the map, which can lead to a null-ptr-deref. This issue can cause a general protection fault, probably for non-canonical address. The vulnerability is triggered in the mlx5e ptp napi poll function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.