PT-2023-9708 · Linux+3 · Linux Kernel+3
Published
2023-10-11
·
Updated
2025-02-03
·
CVE-2023-52792
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the
cxl region attach() function in the Linux kernel, which can lead to a denial of service when cxl region setup targets() fails. This failure prevents endpoint and switch decoder resources from being reused, resulting in future dpa size store() calls returning -EBUSY and commit errors associated with the upstream switch. The proper cleanup for this case is to just return immediately, allowing resources to be cleaned up normally when the failed region is deleted. A new check has been added to prevent a p->targets[] array overflow.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use of Uninitialized Resource
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Os
Suse