CVE-2023-52522: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-52522 is a vulnerability discovered in the Linux kernel's networking subsystem, specifically in the neigh_periodic_work() function. The vulnerability was identified when a missing annotation was found when deleting an RCU protected item from a list. The issue was disclosed in March 2024 and affects the Linux kernel's networking stack (NVD, Red Hat).

The vulnerability stems from a potential store tearing condition in the neigh_periodic_work() function. The issue occurs because readers use rcu_deference(*np), but the writer side lacked proper protection through either rcu_assign_pointer() or WRITE_ONCE() operations. This could result in inconsistencies if another process or thread reads from a value before the operation is complete. The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (Medium) with the vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (Red Hat).

The vulnerability can lead to inconsistencies in the kernel's neighbor table management system if a value is read before an operation is complete. This could potentially result in system instability or denial of service conditions. The impact is primarily focused on availability, with no direct impact on confidentiality or integrity (Red Hat).

The vulnerability requires local access with low privileges to exploit. The attack complexity is rated as low, but user interaction is not required for exploitation. The scope is unchanged, meaning the impact is limited to the vulnerable component (Red Hat).

The vulnerability has been fixed by adding proper RCU protection using rcu_assign_pointer() with lockdep support, which was consistent with the approach used in neigh_flush_dev(). The fix involves replacing the direct pointer assignment with a properly protected RCU operation (Kernel Commit).