boxscore/security
CVE · referencelatest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2023-52887MEDIUM
Linux Linux — net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  N  N  H    5.5   .0067   49.2     —
AFFECTED
  Product  Versions                                    Fixed
  Linux    9d71dd0c70099914fcd063135da3c580865e924c –  —
  Linux    5.4 –                                       5.4.279
TIMELINE
  May 21  Reserved by Linux
  Jul 29  Published (CNA: Linux)
  Aug 4   RESCORED — CVE-2023-52887 (Linux). CVSS 7.5 → 5.5 (NVD).
CWE-617 · CNA: Linux · CVSS v3.1 · 8 references · NVD status: Modified

Description

In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new This patch enhances error handling in scenarios with RTS (Request to Send) messages arriving closely. It replaces the less informative WARN_ON_ONCE backtraces with a new error handling method. This provides clearer error messages and allows for the early termination of problematic sessions. Previously, sessions were only released at the end of j1939_xtp_rx_rts(). Potentially this could be reproduced with something like: testj1939 -r vcan0:0x80 & while true; do # send first RTS cansend vcan0 18EC8090#1014000303002301; # send second RTS cansend vcan0 18EC8090#1014000303002301; # send abort cansend vcan0 18EC8090#ff00000000002301; done

Lifecycle

Complete event history — 3 events, chronological
DateEventDetail
May 21, 2024ReservedReserved by Linux
July 29, 2024PublishedPublished (CNA: Linux)
August 4, 2026RESCOREDRESCORED — CVE-2023-52887 (Linux). CVSS 7.5 → 5.5 (NVD).

Affected

Affected products and packages — 2 rows
VendorProduct / PackageEcosystemVersion introducedFixed
LinuxLinux—9d71dd0c70099914fcd063135da3c580865e924c—
LinuxLinux—5.45.4.279

Weaknesses

CWE-617

References (8)

Related

Authoritative record: CVE-2023-52887 at cve.org

Vendors: linux

Weaknesses: CWE-617

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2023-52887 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.