PT-2024-14685 · Linux · Linux Kernel

Published 2024-05-17 · Updated 2024-05-21 · CVE-2023-52665

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5-rc1

Description A compatibility issue has been identified in the Linux kernel related to the powerpc/ps3 defconfig configuration. The problem arises from a change in the calling ABI for big-endian builds, which is incompatible with the current code for the PS3's LV1 hypervisor calls. This incompatibility can cause runtime errors, including kernel NULL pointer dereferences and access of bad areas.

Recommendations For Linux kernel versions prior to 6.5-rc1, add the line '# CONFIG PPC64 BIG ENDIAN ELF ABI V2 is not set' to the ps3 defconfig file to use PPC64 ELF ABI V1 and prevent runtime errors.

Related Identifiers

CVE-2023-52665

Affected Products

Linux Kernel

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2023-52665 · Security Note
• https://ubuntu.com/security/CVE-2023-52665 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-52665 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-52665 · Security Note
• https://t.me/cvenotify/80272 · Telegram Post
• https://git.kernel.org/stable/c/f70557d48215b14a9284ac3a6ae7e4ee1d039f10 · Note
• https://git.kernel.org/stable/c/482b718a84f08b6fc84879c3e90cc57dba11c115 · Note
• https://git.kernel.org/linus/482b718a84f08b6fc84879c3e90cc57dba11c115 · Note
• https://git.kernel.org/stable/c/d0f0780f03df54d08ced118d27834ee5008724e4 · Note