Name: CVE-2023-52612: Buffer Copy without Checking Size of Input
Creator: Rapid7
Published: 2024-03-18T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2023-52612, CWE-120, CVSS 7.8, EPSS 0.00273

In the Linux kernel, the following vulnerability has been resolved:

crypto: scomp - fix req->dst buffer overflow

The req->dst buffer size should be checked before copying from the scomp_scratch->dst to avoid req->dst buffer overflow problem.

CVSS Details

CVSS 3.1 Base Score: 7.8
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Amazon Linux Ami 2	—	Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.209-198.812Upgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade perfUpgrade bpftoolUpgrade python-perfUpgrade kernel-livepatch-5.15.148-97.158Upgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-devel	Jul 9, 2024	Mar 18, 2024
Amazon_linux_2023	—	Upgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade perf-debuginfoUpgrade python3-perfUpgrade perfUpgrade kernel-livepatch-6.1.75-99.163Upgrade kernel-debuginfo-common-aarch64	Feb 17, 2025	Mar 18, 2024
Debian	—	Upgrade linux	Jun 27, 2024	Mar 18, 2024
Huawei Euleros 2_0_sp10	—	Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists	Jul 16, 2024	Mar 18, 2024
Huawei Euleros 2_0_sp11	—	Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftool	Jun 26, 2024	Mar 18, 2024
Huawei Euleros 2_0_sp12	—	Upgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists	Oct 8, 2024	Mar 18, 2024
Huawei Euleros 2_0_sp8	—	Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernelUpgrade perfUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-devel	Jul 23, 2024	Mar 18, 2024
Huawei Euleros 2_0_sp9	—	Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel	Jul 17, 2024	Mar 18, 2024
Redhat_linux	—	No solution exists	Jul 9, 2025	Mar 18, 2024
Suse	—	Upgrade dtb-armUpgrade dlm-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-develUpgrade kernel-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-docsUpgrade dtb-caviumUpgrade dtb-nvidiaUpgrade kernel-syms-azureUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade kernel-obs-qaUpgrade dtb-xilinxUpgrade kernel-debugUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade reiserfs-kmp-azureUpgrade dtb-apmUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade dlm-kmp-rtUpgrade kernel-sourceUpgrade cluster-md-kmp-rtUpgrade kernel-symsUpgrade ocfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-rtUpgrade kernel-64kb-develUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade dtb-hisiliconUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-rtUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade kernel-debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-default-livepatchUpgrade dtb-amdUpgrade cluster-md-kmp-64kbUpgrade dtb-amlogicUpgrade dtb-broadcomUpgrade kernel-default-manUpgrade kernel-azure-develUpgrade kernel-azureUpgrade kernel-64kbUpgrade dtb-renesasUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-source-azureUpgrade dtb-appleUpgrade kernel-source-rtUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dtb-amazonUpgrade kernel-azure-baseUpgrade dtb-sprdUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade dtb-socionextUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatch-devel	Apr 18, 2024	Mar 18, 2024
Ubuntu	—	Upgrade linux-image-4.15.0-1175-awsUpgrade linux-image-awsUpgrade linux-image-5.4.0-175-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1048-nvidiaUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-176-generic-lpaeUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-4.15.0-1137-oracleUpgrade linux-image-aws-hweUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1060-azure-fdeUpgrade linux-image-5.15.0-1055-oracleUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-bluefieldUpgrade linux-image-4.15.0-1158-kvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-starfiveUpgrade linux-image-5.4.0-1126-gcpUpgrade linux-image-5.15.0-1057-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1034-iotUpgrade linux-image-oracleUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-4.15.0-1168-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1041-xilinx-zynqmpUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1060-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-cvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1106-raspiUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-102-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-4.15.0-231-genericUpgrade linux-image-5.15.0-1040-gkeopUpgrade linux-image-5.4.0-176-lowlatencyUpgrade linux-image-4.15.0-1183-azureUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1082-bluefieldUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04cUpgrade linux-image-4.15.0-231-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-175-genericUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-intelUpgrade linux-image-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1069-ibmUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-5.15.0-102-genericUpgrade linux-image-5.15.0-1050-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1054-gkeUpgrade linux-image-5.15.0-102-lowlatencyUpgrade linux-image-5.4.0-1127-azureUpgrade linux-image-5.4.0-1110-kvmUpgrade linux-image-5.15.0-102-generic-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1122-awsUpgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1048-nvidia-lowlatencyUpgrade linux-image-laptop-23.10Upgrade linux-image-6.5.0-1022-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.5.0-41-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-5.15.0-1055-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1054-kvmUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-5.4.0-1121-oracleUpgrade linux-image-5.15.0-1050-ibmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeopUpgrade linux-image-oemUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-176-genericUpgrade linux-image-5.4.0-1089-gkeopUpgrade linux-image-oem-osp1Upgrade linux-image-intel-iotgUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-102-lowlatency-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1052-intel-iotg	Apr 10, 2024	Mar 18, 2024
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Jan 20, 2025	Mar 18, 2024

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence