PT-2024-14660 · Linux+9 · Linux Kernel+9

Weichen Chen · Published 2023-02-24 · Updated 2025-09-29 · CVE-2023-52619

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue occurs when the number of cpu cores is adjusted to an odd number, causing the zone size to become an odd number. This leads to the address of certain zones being mapped to non-alignment va, resulting in crashes when accessing these va. The solution involves using ALIGN DOWN() to ensure the zone size is even.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-99

Related Identifiers

ALSA-2024:5101

ALSA-2024:5102

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

BDU:2025-14287

CESA-2024_5101

CESA-2024_5102

CVE-2023-52619

DLA-3840-1

DLA-3842-1

DSA-5658-1

DSA-5681-1

INFSA-2024_5101

INFSA-2024_5102

INFSA-2024_9315

OESA-2024-1526

OESA-2024-1535

OESA-2024-1541

OPENSUSE-SU-2024_1322-1

OPENSUSE-SU-2024_1322-2

OPENSUSE-SU-2024_1332-1

OPENSUSE-SU-2024_1332-2

OPENSUSE-SU-2024_1466-1

OPENSUSE-SU-2024_1480-1

OPENSUSE-SU-2024_1490-1

RHSA-2024:10771

RHSA-2024:10772

RHSA-2024:10773

RHSA-2024:5101

RHSA-2024:5102

RHSA-2024:6206

RHSA-2024:9315

RHSA-2024_5101

RHSA-2024_5102

RHSA-2024_9315

RLSA-2024:5101

RLSA-2024:5102

RXSA-2024:5101

SUSE-SU-2024:1466-1

SUSE-SU-2024:1480-1

SUSE-SU-2024:1490-1

SUSE-SU-2024:2892-1

SUSE-SU-2024:2901-1

SUSE-SU-2024:2940-1

USN-6765-1

USN-6766-1

USN-6766-2

USN-6766-3

USN-6767-1

USN-6767-2

USN-6795-1

USN-6818-1

USN-6818-2

USN-6818-3

USN-6818-4

USN-6819-1

USN-6819-2

USN-6819-3

USN-6819-4

USN-6828-1

Affected Products

Almalinux

Astra Linux

Centos

Linuxmint

Linux Kernel

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 1741

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52619.json · Exploit
• https://ubuntu.com/security/CVE-2023-52642 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26698 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52644 · Vendor Advisory
• https://git.kernel.org/stable/c/0593cfd321df9001142a9d2c58d4144917dff7ee · Patch
• https://osv.dev/vulnerability/USN-6766-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26601 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35811 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27044 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26602 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-22099 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52643 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52626 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6765-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52589 · Vendor Advisory