# CVE-2023-52562: linux: In the Linux kernel, the following vulnerability has been resolved: mm/slab_common: fix slab_caches list corruption... CVE-2023-52562 is fixed in 37 products on 1 platform, first by ALAS2023-2023-385, released October 12, 2023. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2023-52562 - Priority: Routine - CVSS: 5.5 (medium) - EPSS: 0.0022 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Oct 12, 2023 ## Description In the Linux kernel, the following vulnerability has been resolved: mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy() After the commit in Fixes:, if a module that created a slab cache does not release all of its allocated objects before destroying the cache (at rmmod time), we might end up releasing the kmem_cache object without removing it from the slab_caches list thus corrupting the list as kmem_cache_destroy() ignores the return value from shutdown_cache(), which in turn never removes the kmem_cache object from slabs_list in case __kmem_cache_shutdown() fails to release all of the cache's slabs. This is easily observable on a kernel built with CONFIG_DEBUG_LIST=y as after that ill release the system will immediately trip on list_add, or list_del, assertions similar to the one shown below as soon as another kmem_cache gets created, or destroyed: [ 1041.213632] list_del corruption. next->prev should be ffff89f596fb5768, but was 52f1e5016aeee75d. (next=ffff89f595a1b268) [ 1041.219165] ------------[ cut here ]------------ [ 1041.221517] kernel BUG at lib/list_debug.c:62! [ 1041.223452] invalid opcode: 0000 [#1] PREEMPT SMP PTI [ 1041.225408] CPU: 2 PID: 1852 Comm: rmmod Kdump: loaded Tainted: G B W OE 6.5.0 #15 [ 1041.228244] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS edk2-20230524-3.fc37 05/24/2023 [ 1041.231212] RIP: 0010:__list_del_entry_valid+0xae/0xb0 Another quick way to trigger this issue, in a kernel with CONFIG_SLUB=y, is to set slub_debug to poison the released objects and then just run cat /proc/slabinfo after removing the module that leaks slab objects, in which case the kernel will panic: [ 50.954843] general protection fault, probably for non-canonical address 0xa56b6b6b6b6b6b8b: 0000 [#1] PREEMPT SMP PTI [ 50.961545] CPU: 2 PID: 1495 Comm: cat Kdump: loaded Tainted: G B W OE 6.5.0 #15 [ 50.966808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS edk2-20230524-3.fc37 05/24/2023 [ 50.972663] RIP: 0010:get_slabinfo+0x42/0xf0 This patch fixes this issue by properly checking shutdown_cache()'s return value before taking the kmem_cache_release() branch. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | bpftool RHEL 8 | 0:4.18.0-513.9.1.el8_9 | [RHSA-2023:7549](https://patchblox.com/security/data/fix/linux/rhsa-2023-7549.md) | Nov 28, 2023 | | Linux | bpftool amzn 2023 | 6.1.56-82.125.amzn2023 | [ALAS2023-2023-385](https://patchblox.com/security/data/fix/linux/alas2023-2023-385.md) | Oct 12, 2023 | | Linux | bpftool-debuginfo amzn 2023 | 6.1.56-82.125.amzn2023 | [ALAS2023-2023-385](https://patchblox.com/security/data/fix/linux/alas2023-2023-385.md) | Oct 12, 2023 | | Linux | kernel RHEL 8 | 0:4.18.0-513.9.1.el8_9 | [RHSA-2023:7549](https://patchblox.com/security/data/fix/linux/rhsa-2023-7549.md) | Nov 28, 2023 | | Linux | kernel amzn 2023 | 6.1.56-82.125.amzn2023 | [ALAS2023-2023-385](https://patchblox.com/security/data/fix/linux/alas2023-2023-385.md) | Oct 12, 2023 | | Linux | kernel-abi-stablelists RHEL 8 | 0:4.18.0-513.9.1.el8_9 | [RHSA-2023:7549](https://patchblox.com/security/data/fix/linux/rhsa-2023-7549.md) | Nov 28, 2023 | | Linux | kernel-core RHEL 8 | 0:4.18.0-513.9.1.el8_9 | [RHSA-2023:7549](https://patchblox.com/security/data/fix/linux/rhsa-2023-7549.md) | Nov 28, 2023 | | Linux | kernel-debug RHEL 8 | 0:4.18.0-513.9.1.el8_9 | [RHSA-2023:7549](https://patchblox.com/security/data/fix/linux/rhsa-2023-7549.md) | Nov 28, 2023 | | Linux | kernel-debug-core RHEL 8 | 0:4.18.0-513.9.1.el8_9 | [RHSA-2023:7549](https://patchblox.com/security/data/fix/linux/rhsa-2023-7549.md) | Nov 28, 2023 | | Linux | kernel-debug-devel RHEL 8 | 0:4.18.0-513.9.1.el8_9 | [RHSA-2023:7549](https://patchblox.com/security/data/fix/linux/rhsa-2023-7549.md) | Nov 28, 2023 | | Linux | kernel-debug-modules RHEL 8 | 0:4.18.0-513.9.1.el8_9 | [RHSA-2023:7549](https://patchblox.com/security/data/fix/linux/rhsa-2023-7549.md) | Nov 28, 2023 | | Linux | kernel-debug-modules-extra RHEL 8 | 0:4.18.0-513.9.1.el8_9 | [RHSA-2023:7549](https://patchblox.com/security/data/fix/linux/rhsa-2023-7549.md) | Nov 28, 2023 | | Linux | kernel-debuginfo amzn 2023 | 6.1.56-82.125.amzn2023 | [ALAS2023-2023-385](https://patchblox.com/security/data/fix/linux/alas2023-2023-385.md) | Oct 12, 2023 | | Linux | kernel-debuginfo-common-aarch64 amzn 2023 | 6.1.56-82.125.amzn2023 | [ALAS2023-2023-385](https://patchblox.com/security/data/fix/linux/alas2023-2023-385.md) | Oct 12, 2023 | | Linux | kernel-debuginfo-common-x86_64 amzn 2023 | 6.1.56-82.125.amzn2023 | [ALAS2023-2023-385](https://patchblox.com/security/data/fix/linux/alas2023-2023-385.md) | Oct 12, 2023 | | Linux | kernel-devel RHEL 8 | 0:4.18.0-513.9.1.el8_9 | [RHSA-2023:7549](https://patchblox.com/security/data/fix/linux/rhsa-2023-7549.md) | Nov 28, 2023 | | Linux | kernel-devel amzn 2023 | 6.1.56-82.125.amzn2023 | [ALAS2023-2023-385](https://patchblox.com/security/data/fix/linux/alas2023-2023-385.md) | Oct 12, 2023 | | Linux | kernel-doc RHEL 8 | 0:4.18.0-513.9.1.el8_9 | [RHSA-2023:7549](https://patchblox.com/security/data/fix/linux/rhsa-2023-7549.md) | Nov 28, 2023 | | Linux | kernel-headers amzn 2023 | 6.1.56-82.125.amzn2023 | [ALAS2023-2023-385](https://patchblox.com/security/data/fix/linux/alas2023-2023-385.md) | Oct 12, 2023 | | Linux | kernel-libbpf amzn 2023 | 6.1.56-82.125.amzn2023 | [ALAS2023-2023-385](https://patchblox.com/security/data/fix/linux/alas2023-2023-385.md) | Oct 12, 2023 | | Linux | kernel-libbpf-devel amzn 2023 | 6.1.56-82.125.amzn2023 | [ALAS2023-2023-385](https://patchblox.com/security/data/fix/linux/alas2023-2023-385.md) | Oct 12, 2023 | | Linux | kernel-libbpf-static amzn 2023 | 6.1.56-82.125.amzn2023 | [ALAS2023-2023-385](https://patchblox.com/security/data/fix/linux/alas2023-2023-385.md) | Oct 12, 2023 | | Linux | kernel-livepatch-6.1.56-82.125 amzn 2023 | 1.0-0.amzn2023 | [ALAS2023-2023-385](https://patchblox.com/security/data/fix/linux/alas2023-2023-385.md) | Oct 12, 2023 | | Linux | kernel-modules RHEL 8 | 0:4.18.0-513.9.1.el8_9 | [RHSA-2023:7549](https://patchblox.com/security/data/fix/linux/rhsa-2023-7549.md) | Nov 28, 2023 | | Linux | kernel-modules-extra RHEL 8 | 0:4.18.0-513.9.1.el8_9 | [RHSA-2023:7549](https://patchblox.com/security/data/fix/linux/rhsa-2023-7549.md) | Nov 28, 2023 | | Linux | kernel-modules-extra amzn 2023 | 6.1.56-82.125.amzn2023 | [ALAS2023-2023-385](https://patchblox.com/security/data/fix/linux/alas2023-2023-385.md) | Oct 12, 2023 | | Linux | kernel-tools RHEL 8 | 0:4.18.0-513.9.1.el8_9 | [RHSA-2023:7549](https://patchblox.com/security/data/fix/linux/rhsa-2023-7549.md) | Nov 28, 2023 | | Linux | kernel-tools amzn 2023 | 6.1.56-82.125.amzn2023 | [ALAS2023-2023-385](https://patchblox.com/security/data/fix/linux/alas2023-2023-385.md) | Oct 12, 2023 | | Linux | kernel-tools-debuginfo amzn 2023 | 6.1.56-82.125.amzn2023 | [ALAS2023-2023-385](https://patchblox.com/security/data/fix/linux/alas2023-2023-385.md) | Oct 12, 2023 | | Linux | kernel-tools-devel amzn 2023 | 6.1.56-82.125.amzn2023 | [ALAS2023-2023-385](https://patchblox.com/security/data/fix/linux/alas2023-2023-385.md) | Oct 12, 2023 | | Linux | kernel-tools-libs RHEL 8 | 0:4.18.0-513.9.1.el8_9 | [RHSA-2023:7549](https://patchblox.com/security/data/fix/linux/rhsa-2023-7549.md) | Nov 28, 2023 | | Linux | kernel-tools-libs-devel RHEL 8 | 0:4.18.0-513.9.1.el8_9 | [RHSA-2023:7549](https://patchblox.com/security/data/fix/linux/rhsa-2023-7549.md) | Nov 28, 2023 | | Linux | kernel-zfcpdump RHEL 8 | 0:4.18.0-513.9.1.el8_9 | [RHSA-2023:7549](https://patchblox.com/security/data/fix/linux/rhsa-2023-7549.md) | Nov 28, 2023 | | Linux | kernel-zfcpdump-core RHEL 8 | 0:4.18.0-513.9.1.el8_9 | [RHSA-2023:7549](https://patchblox.com/security/data/fix/linux/rhsa-2023-7549.md) | Nov 28, 2023 | | Linux | kernel-zfcpdump-devel RHEL 8 | 0:4.18.0-513.9.1.el8_9 | [RHSA-2023:7549](https://patchblox.com/security/data/fix/linux/rhsa-2023-7549.md) | Nov 28, 2023 | | Linux | kernel-zfcpdump-modules RHEL 8 | 0:4.18.0-513.9.1.el8_9 | [RHSA-2023:7549](https://patchblox.com/security/data/fix/linux/rhsa-2023-7549.md) | Nov 28, 2023 | | Linux | kernel-zfcpdump-modules-extra RHEL 8 | 0:4.18.0-513.9.1.el8_9 | [RHSA-2023:7549](https://patchblox.com/security/data/fix/linux/rhsa-2023-7549.md) | Nov 28, 2023 | | Linux | linux Debian 12.15 (bookworm) | 6.1.64-1 | [DEBIAN-CVE-2023-52562](https://patchblox.com/security/data/fix/linux/debian-cve-2023-52562.md) | Mar 2, 2024 | | Linux | linux Debian 13.5 (trixie) | 6.5.6-1 | [DEBIAN-CVE-2023-52562](https://patchblox.com/security/data/fix/linux/debian-cve-2023-52562.md) | Mar 2, 2024 | | Linux | linux Debian 14 | 6.5.6-1 | [DEBIAN-CVE-2023-52562](https://patchblox.com/security/data/fix/linux/debian-cve-2023-52562.md) | Mar 2, 2024 | | Linux | perf RHEL 8 | 0:4.18.0-513.9.1.el8_9 | [RHSA-2023:7549](https://patchblox.com/security/data/fix/linux/rhsa-2023-7549.md) | Nov 28, 2023 | | Linux | perf amzn 2023 | 6.1.56-82.125.amzn2023 | [ALAS2023-2023-385](https://patchblox.com/security/data/fix/linux/alas2023-2023-385.md) | Oct 12, 2023 | | Linux | perf-debuginfo amzn 2023 | 6.1.56-82.125.amzn2023 | [ALAS2023-2023-385](https://patchblox.com/security/data/fix/linux/alas2023-2023-385.md) | Oct 12, 2023 | | Linux | python3-perf RHEL 8 | 0:4.18.0-513.9.1.el8_9 | [RHSA-2023:7549](https://patchblox.com/security/data/fix/linux/rhsa-2023-7549.md) | Nov 28, 2023 | | Linux | python3-perf amzn 2023 | 6.1.56-82.125.amzn2023 | [ALAS2023-2023-385](https://patchblox.com/security/data/fix/linux/alas2023-2023-385.md) | Oct 12, 2023 | | Linux | python3-perf-debuginfo amzn 2023 | 6.1.56-82.125.amzn2023 | [ALAS2023-2023-385](https://patchblox.com/security/data/fix/linux/alas2023-2023-385.md) | Oct 12, 2023 | --- Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.