CVE-2023-52996
ipv4: prevent potential spectre v1 gadget in fib_metrics_match()
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
In the Linux kernel, the following vulnerability has been resolved: ipv4: prevent potential spectre v1 gadget in fib_metrics_match() if (!type) continue; if (type > RTAX_MAX) return false; ... fi_val = fi->fib_metrics->metrics[type - 1]; @type being used as an array index, we need to prevent cpu speculation or risk leaking kernel memory content.
| Vendor | linux |
| Product | linux |
| Ecosystems | |
| Industries | Technology |
| Published | Mar 27, 2025 |
| Last Updated | May 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for linux linux
Be the first to know when new unknown vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Linux / Linux
5f9ae3d9e7e4ad6db0491abc7c4ae5452dbeadd8 < 8f0eb24f1a7a60ce635f0d757a46f1a37a4d467d 5f9ae3d9e7e4ad6db0491abc7c4ae5452dbeadd8 < 7f9828fb1f688210e681268490576f0ca65c322a 5f9ae3d9e7e4ad6db0491abc7c4ae5452dbeadd8 < ca3cf947760de050d558293002ad3e7f4b8745d2 5f9ae3d9e7e4ad6db0491abc7c4ae5452dbeadd8 < f9753ebd61be2d957b5504cbd3fd719674f05b7a 5f9ae3d9e7e4ad6db0491abc7c4ae5452dbeadd8 < 5e9398a26a92fc402d82ce1f97cc67d832527da0
Linux / Linux
4.14
References
git.kernel.org: https://git.kernel.org/stable/c/8f0eb24f1a7a60ce635f0d757a46f1a37a4d467d git.kernel.org: https://git.kernel.org/stable/c/7f9828fb1f688210e681268490576f0ca65c322a git.kernel.org: https://git.kernel.org/stable/c/ca3cf947760de050d558293002ad3e7f4b8745d2 git.kernel.org: https://git.kernel.org/stable/c/f9753ebd61be2d957b5504cbd3fd719674f05b7a git.kernel.org: https://git.kernel.org/stable/c/5e9398a26a92fc402d82ce1f97cc67d832527da0