PT-2023-9717 · Linux+7 · Linux Kernel+7

Shuai Xue

·

Published

2023-09-12

·

Updated

2025-09-29

·

CVE-2023-52835

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the perf/core component of the Linux kernel, where a large AUX area request can cause the system to fail with a "Cannot allocate memory" error, revealing a WARNING with alloc pages(). This occurs when the size of the pointer array rb->aux pages crosses the limitation set by MAX ORDER. The allocated page for this array is physically contiguous and virtually contiguous with an order of 0..MAX ORDER.
Technical details about exploitation include:
  • The rb alloc aux function is involved in the allocation of the rb->aux pages array.
  • The perf mmap function is used to map the AUX area into memory.
  • The /usr/bin/perf record command with a large AUX area can trigger the issue, for example: #perf record -C 0 -m ,4G -e arm spe 0// -- sleep 1.
  • The alloc pages function is where the WARNING is triggered.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Improper Validation of Array Index

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2024:4211
ALSA-2024:4352
ALSA-2025_16880
BDU:2024-10255
CESA-2024_4211
CESA-2024_4352
CVE-2023-52835
INFSA-2024_4211
INFSA-2024_4352
OESA-2024-1677
OESA-2024-1678
OESA-2024-1680
OESA-2024-1681
OESA-2024-1682
OPENSUSE-SU-2024_2372-1
OPENSUSE-SU-2024_2394-1
RHSA-2024:4211
RHSA-2024:4352
RHSA-2024_4211
RHSA-2024_4352
RHSA-2025:11810
RLSA-2024:4211
RLSA-2024:4352
RXSA-2024:4211
SUSE-SU-2024:2360-1
SUSE-SU-2024:2372-1
SUSE-SU-2024:2381-1
SUSE-SU-2024:2394-1
SUSE-SU-2024:2561-1
SUSE-SU-2024:2571-1
SUSE-SU-2024:2896-1
SUSE-SU-2024:2939-1
SUSE-SU-2024:2973-1
SUSE-SU-2025:20008-1
SUSE-SU-2025:20028-1

Affected Products

Almalinux
Astra Linux
Centos
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse