CVE-2023-52677

MEDIUM

Linux Kernel - Denial of Service via RISC-V Code Patch Exit Section Check

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: riscv: Check if the code to patch lies in the exit section Otherwise we fall through to vmalloc_to_page() which panics since the address does not lie in the vmalloc region.

References (5)

Core 5

Core References

Patch

https://git.kernel.org/stable/c/938f70d14618ec72e10d6fcf8a546134136d7c13

Patch

https://git.kernel.org/stable/c/890cfe5337e0aaf03ece1429db04d23c88da72e7

Patch

https://git.kernel.org/stable/c/8db56df4a954b774bdc68917046a685a9fa2e4bc

Patch

https://git.kernel.org/stable/c/1d7a03052846f34d624d0ab41a879adf5e85c85f

Patch

https://git.kernel.org/stable/c/420370f3ae3d3b883813fd3051a38805160b2b9f

Scores

CVSS v3 5.5

EPSS 0.0022

EPSS Percentile 13.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

Status published

Products (17)

linux/Kernel 5.16.0 - 6.1.75linux

linux/Kernel 5.7.0 - 5.15.148linux

linux/Kernel 6.2.0 - 6.6.14linux

linux/Kernel 6.7.0 - 6.7.2linux

Linux/Linux < 5.7

Linux/Linux 043cb41a85de1c0e944da61ad7a264960e22c865 - 1d7a03052846f34d624d0ab41a879adf5e85c85f

Linux/Linux 043cb41a85de1c0e944da61ad7a264960e22c865 - 420370f3ae3d3b883813fd3051a38805160b2b9f

Linux/Linux 043cb41a85de1c0e944da61ad7a264960e22c865 - 890cfe5337e0aaf03ece1429db04d23c88da72e7

Linux/Linux 043cb41a85de1c0e944da61ad7a264960e22c865 - 8db56df4a954b774bdc68917046a685a9fa2e4bc

Linux/Linux 043cb41a85de1c0e944da61ad7a264960e22c865 - 938f70d14618ec72e10d6fcf8a546134136d7c13

... and 7 more

Published May 17, 2024

Tracked Since Feb 18, 2026