VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 27, 2025· Updated May 4, 2025

ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()

CVE-2023-52997

Description

In the Linux kernel, the following vulnerability has been resolved:

ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()

if (!type) continue; if (type > RTAX_MAX) return -EINVAL; ... metrics[type - 1] = val;

@type being used as an array index, we need to prevent cpu speculation or risk leaking kernel memory content.

Affected products

10

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.