PT-2023-9481 · Linux+6 · Linux Kernel+6

Fei Yang · Published 2023-10-12 · Updated 2025-09-29 · CVE-2023-52504

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the x86/alternatives component of the Linux kernel, where KASAN (Kernel Address Sanitizer) triggers during apply alternatives() on a 5-level paging machine, causing an out-of-bounds read in rcu is watching(). This occurs because KASAN gets confused when apply alternatives() patches the KASAN SHADOW START users. A test patch that makes KASAN SHADOW START static works around the issue. The problem is fixed by disabling KASAN while the kernel is patching alternatives.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALSA-2025_16880

ALT-PU-2023-6736

BDU:2024-07834

CVE-2023-52504

OESA-2024-1496

OESA-2024-1497

OESA-2024-1498

OESA-2024-1499

OESA-2024-1500

OESA-2024-1501

OPENSUSE-SU-2024_1321-1

OPENSUSE-SU-2024_1322-1

OPENSUSE-SU-2024_1322-2

OPENSUSE-SU-2024_1332-1

OPENSUSE-SU-2024_1332-2

OPENSUSE-SU-2024_1466-1

OPENSUSE-SU-2024_1480-1

OPENSUSE-SU-2024_1490-1

SUSE-SU-2024:1320-1

SUSE-SU-2024:1321-1

SUSE-SU-2024:1466-1

SUSE-SU-2024:1480-1

SUSE-SU-2024:1490-1

USN-6831-1

USN-6867-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 563

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52504.json · Exploit
• https://ubuntu.com/security/CVE-2024-27416 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26788 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52492 · Security Note
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20241017SE16 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52486 · Security Note
• https://ubuntu.com/security/CVE-2024-26835 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-48627 · Security Note
• https://git.kernel.org/stable/c/5b784489c8158518bf7a466bb3cc045b0fb66b4b · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-52504 · Security Note
• https://ubuntu.com/security/CVE-2024-26791 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27412 · Vendor Advisory
• https://git.kernel.org/stable/c/6788b10620ca6e98575d1e06e72a8974aad7657e · Patch
• https://ubuntu.com/security/notices/USN-6867-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1490-1 · Vendor Advisory