Medium severity5.5NVD Advisory· Published Mar 27, 2025· Updated Jun 17, 2026
CVE-2023-52997
CVE-2023-52997
Description
In the Linux kernel, the following vulnerability has been resolved:
ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()
if (!type) continue; if (type > RTAX_MAX) return -EINVAL; ... metrics[type - 1] = val;
@type being used as an array index, we need to prevent cpu speculation or risk leaking kernel memory content.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
17cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=4.3,<4.19.272
- cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.2:rc5:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: 4.3
- osv-coords9 versionspkg:linux/kernelpkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP5pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSSpkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSSpkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSSpkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5pkg:rpm/suse/kgraft-patch-SLE12-SP5_Update_67&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP5
>= 4.3.0, < 4.19.272+ 8 more
- (no CPE)range: >= 4.3.0, < 4.19.272
- (no CPE)range: < 4.12.14-122.255.1
- (no CPE)range: < 4.12.14-122.255.1
- (no CPE)range: < 4.12.14-122.255.1
- (no CPE)range: < 4.12.14-122.255.1
- (no CPE)range: < 4.12.14-122.255.1
- (no CPE)range: < 4.12.14-122.255.1
- (no CPE)range: < 4.12.14-122.255.1
- (no CPE)range: < 1-8.5.1
Patches
Vulnerability mechanics
References
6- git.kernel.org/stable/c/1d1d63b612801b3f0a39b7d4467cad0abd60e5c8nvdPatch
- git.kernel.org/stable/c/34c6142f0df9cd75cba5a7aa9df0960d2854b415nvdPatch
- git.kernel.org/stable/c/6850fe301d015a7d2012d1de8caf43dafb7cc2f6nvdPatch
- git.kernel.org/stable/c/746db9ec1e672eee13965625ddac0d97e16fa20cnvdPatch
- git.kernel.org/stable/c/d50e7348b44f1e046121ff5be01b7fb6978a1149nvdPatch
- git.kernel.org/stable/c/ef050cf5fb70d995a0d03244e25179b7c66a924anvdPatch
News mentions
0No linked articles in our index yet.