CVE-2023-52735: Linux Kernel

Critical severity, CVSS 9.1. EPSS: 1.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself sock_map proto callbacks should never call themselves by design. Protect against bugs like [1] and break out of the recursive loop to avoid a stack overflow in favor of a resource leak. [1] https://lore.kernel.org/all/00000000000073b14905ef2e7401@google.com/

Affected products

• Linux Linux Kernel: before 5.15.95 (fixed in 5.15.95); from 5.16, before 6.1.13 (fixed in 6.1.13); version 6.2 only

Published 2024-05-21. Last modified 2026-06-17.