PT-2023-8775 · Linux+7 · Linux Kernel+7
Publicado
2023-12-05
·
Atualizado
2025-09-29
·
CVE-2023-52462
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a function in the Linux kernel that incorrectly checks a register when it is spilled onto a stack. This can potentially allow an attacker to impact the integrity of protected information. The problem arises when a register is spilled onto a stack as a 1/2/4-byte register, and the slot type array is not properly consulted to determine if a stack slot has a spilled register. To resolve this, a helper function
is spilled reg() can be used.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu