PT-2023-9485 · Linux+2 · Linux Kernel+2
Eddie James
·
Publicado
2023-10-11
·
Atualizado
2025-01-13
·
CVE-2023-52499
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.1.55-d23900f.ppcnf-fsp2
Description
The issue is related to a problem in the ret from syscall function where the check for icache 44x need flush is done. When the flush is needed, the code jumps out-of-line to do the flush and then intends to jump back to continue the syscall return. However, the branch back to label 1b doesn't return to the correct location, instead branching back just prior to the return to userspace, causing bogus register values to be used by the rfi. The breakage was introduced by a commit that inadvertently removed the "1" label and reused it elsewhere.
Recommendations
To resolve the issue, add named local labels in the correct locations, ensuring the return label is outside the ifdef so that CONFIG PPC 47x=n compiles. Update to a version of the Linux kernel that includes the fix for the powerpc/47x syscall return crash.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Astra Linux
Linux Kernel
Red Os