CVE-2023-52574

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a null pointer dereference error in the Linux kernel's team component when the team device type is changed from non-ether to ether. This occurs because the header ops of the team device are incorrectly changed to vlan header ops, triggering a null-ptr-deref for vlan->real dev in the vlan dev hard header() function. The error happens when a VLAN device is enslaved to a team device and the team device type is changed. To fix the bug, eth header ops should be cached in team setup() and then assigned to the header ops of the team net device when its type is changed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.