Search/CVE-2023-52574
● CVE — High

CVE-2023-52574

VendorlinuxProductlinux kernelDiscoveredMar 2, 2024UpdatedAug 4, 2026

In the Linux kernel, the following vulnerability has been resolved: team: fix null-ptr-deref when team device type is changed Get a null-ptr-deref bug as follows with reproducer [1]. BUG: kernel NULL pointer dereference, address: 0000000000000228 ... RIP: 0010:vlan_dev_hard_header+0x35/0x140 [8021q] ... Call Trace: ? __die+0x24/0x70 ? page_fault_oops+0x82/0x150 ? exc_page_fault+0x69/0x150 ? asm_exc_page_fault+0x26/0x30 ? vlan_dev_hard_header+0x35/0x140 [8021q] ? vlan_dev_hard_header+0x8e/0x140 [8021q] neigh_connected_output+0xb2/0x100 ip6_finish_output2+0x1cb/0x520 ? nf_hook_slow+0x43/0xc0 ? ip6_mtu+0x46/0x80 ip6_finish_output+0x2a/0xb0 mld_sendpack+0x18f/0x250 mld_ifc_work+0x39/0x160 process_one_work+0x1e6/0x3f0 worker_thread+0x4d/0x2f0 ? __pfx_worker_thread+0x10/0x10 kthread+0xe5/0x120…

CVSS v3.1
7.8 HIGH
EPSS
0.24%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
8
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Connections
10 relationships
Timeline
disclosure → media coverage
Mar 2, 2024
Disclosure — published as a CVE record. · last revised by NVD Aug 4, 2026
Oct 30, 2025
ubuntu.com reports: USN-7853-1: Linux kernel vulnerabilities
Oct 30, 2025
ubuntu.com reports: USN-7854-1: Linux kernel (KVM) vulnerabilities
Oct 30, 2025
ubuntu.com reports: USN-7853-2: Linux kernel (FIPS) vulnerabilities
Nov 6, 2025
ubuntu.com reports: USN-7863-1: Linux kernel vulnerabilities
Nov 7, 2025
ubuntu.com reports: USN-7853-3: Linux kernel (Azure) vulnerabilities
Nov 10, 2025
ubuntu.com reports: USN-7865-1: Linux kernel (FIPS) vulnerabilities
Nov 19, 2025
ubuntu.com reports: USN-7875-1: Linux kernel (Oracle) vulnerabilities
Dec 16, 2025
ubuntu.com reports: USN-7937-1: Linux kernel (Azure FIPS) vulnerabilities