PT-2023-8797 · Linux+2 · Linux Kernel+2

Haitao Huang · Published 2023-09-28 · Updated 2024-12-11 · CVE-2023-52568

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the SGX EPC reclaimer (ksgxd) in the Linux kernel, which may reclaim the SECS EPC page for an enclave and set secs.epc page to NULL. The SECS page is used for EAUG and ELDU in the SGX page fault handler. However, the NULL check for secs.epc page is only done for ELDU, not EAUG before being used. This can lead to a kernel NULL pointer dereference. The SECS page holds global enclave metadata and can only be reclaimed when there are no other enclave pages remaining. An enclave cannot run nor generate page faults without a resident SECS page. The bug requires a specific race condition to be triggered with a #PF for EAUG.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Use After Free

Buffer Overflow

Weakness Enumeration

CWE-476

CWE-416

CWE-119

Related Identifiers

BDU:2024-01937

CVE-2023-52568

OESA-2024-1482

OESA-2024-1486

OESA-2024-1487

Affected Products

Astra Linux

Linux Kernel

Red Os

References · 60

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52568.json · Exploit
• https://osv.dev/vulnerability/OESA-2024-1482 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-47070 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52597 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52464 · Security Note
• https://osv.dev/vulnerability/OESA-2024-1487 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26601 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52522 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52561 · Security Note
• https://git.kernel.org/stable/c/c6c2adcba50c2622ed25ba5d5e7f05f584711358 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-52577 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-52568 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-52568 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52530 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-47101 · Security Note