PT-2023-9483 · Linux+4 · Linux Kernel+4
Tze-Nan Wu
·
Published
2023-09-08
·
Updated
2025-09-29
·
CVE-2023-52501
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The vulnerability is related to the ring-buffer component in the Linux kernel. It occurs when the writer can corrupt the reader while iterating over the ring buffer, specifically when the last event is at the end of the page and has only 4 bytes left. The issue arises from the checks to detect corruption by the writer to reads, which need to see the length of the event. If the length in the first 4 bytes is zero, the length is stored in the second 4 bytes. However, if the writer is updating the code, there's a small window where the length in the first 4 bytes could be zero, even though the length is only 4 bytes. This can cause
rb event length() to read the next 4 bytes, which could be off the allocated page. To protect against this, the system fails immediately if the next event pointer is less than 8 bytes from the end of the commit.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Information Disclosure
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Hat
Red Os
Suse