{"id":"CVE-2023-52502","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()\n\nSili Luo reported a race in nfc_llcp_sock_get(), leading to UAF.\n\nGetting a reference on the sock…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()\n\nSili Luo reported a race in nfc_llcp_sock_get(), leading to UAF.\n\nGetting a reference on the sock…","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-362","CWE-416"],"vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 3.6, < 4.19.297","linux_kernel >= 4.20, < 5.4.259","linux_kernel >= 5.5, < 5.10.199","linux_kernel >= 5.11, < 5.15.136","linux_kernel >= 5.16, < 6.1.59","linux_kernel >= 6.2, < 6.5.8","linux_kernel = 6.6"],"patched":["linux_kernel 6.5.8"],"published":"2024-03-02","updated":"2026-08-04","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-52502","references":[{"url":"https://git.kernel.org/stable/c/31c07dffafce914c1d1543c135382a11ff058d93","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/6ac22ecdaad2ecc662048f8c6b0ceb1ca0699ef9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/7adcf014bda16cdbf804af5c164d94d5d025db2d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/d1af8a39cf839d93c8967fdd858f6bbdc3e4a15c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/d888d3f70b0de32b4f51534175f039ddab15eef8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/e4f2611f07c87b3ddb57c4b9e8efcd1e330fc3dc","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/e863f5720a5680e50c4cecf12424d7cc31b3eb0a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/31c07dffafce914c1d1543c135382a11ff058d93","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/6ac22ecdaad2ecc662048f8c6b0ceb1ca0699ef9","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/7adcf014bda16cdbf804af5c164d94d5d025db2d","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/d1af8a39cf839d93c8967fdd858f6bbdc3e4a15c","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/d888d3f70b0de32b4f51534175f039ddab15eef8","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/e4f2611f07c87b3ddb57c4b9e8efcd1e330fc3dc","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/stable/c/e863f5720a5680e50c4cecf12424d7cc31b3eb0a","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd"],"epss":0.00247,"epssPercentile":0.16297,"ingestedAt":"2026-08-04T10:39:39.979Z","slug":"CVE-2023-52502","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()\n\nSili Luo reported a race in nfc_llcp_sock_get(), leading to UAF.\n\nGetting a reference on the socket found in a lookup while\nholding a lock should happen before releasing the lock.\n\nnfc_llcp_sock_get_sn() has a similar problem.\n\nFinally nfc_llcp_recv_snl() needs to make sure the socket\nfound by nfc_llcp_sock_from_sn() does not disappear.\n\n## Affected\n\n- `linux_kernel >= 3.6, < 4.19.297`\n- `linux_kernel >= 4.20, < 5.4.259`\n- `linux_kernel >= 5.5, < 5.10.199`\n- `linux_kernel >= 5.11, < 5.15.136`\n- `linux_kernel >= 5.16, < 6.1.59`\n- `linux_kernel >= 6.2, < 6.5.8`\n- `linux_kernel = 6.6`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.5.8`","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":48.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}