PT-2024-14727 · Linux+1 · Linux Kernel+1

Published 2023-10-27 · Updated 2026-04-20 · CVE-2023-52761

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc2-00001-g328a1f96f7b9 #34

Description The issue is related to the Linux kernel's VMAP STACK overflow detection. When an overflow is detected, the CPU switches to a shadow stack temporarily before switching to a per-cpu overflow stack. However, if two CPUs are racing and end up in an overflowing kernel stack, they may corrupt each other's state because shadow stack is not per-cpu. This vulnerability can cause a kernel panic due to a stack overflow.

Recommendations To resolve this issue, update the Linux kernel to a version that includes the patch for this vulnerability. Specifically, update to a version later than 6.1.0-rc2-00001-g328a1f96f7b9 #34. As a temporary workaround, consider disabling the CONFIG VMAP STACK configuration option to prevent the use of shadow stack until a patch is available. However, this may have performance implications and should be carefully evaluated before implementation.

Exploit

Fix

Uncontrolled Recursion

Weakness Enumeration

CWE-674

Related Identifiers

BDU:2025-15386

CVE-2023-52761

ECHO-945E-1B38-12EE

Affected Products

Debian

Linux Kernel

References · 24

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52761.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2023-52761 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-52761 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-52761 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2023-52761 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52761 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-52761 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52761 · Vendor Advisory
• https://git.kernel.org/stable/c/1493baaf09e3c1899959c8a107cd1207e16d1788 · Patch
• https://bdu.fstec.ru/vul/2025-15386 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-52761 · Vendor Advisory
• https://git.kernel.org/stable/c/eff53aea3855f71992c043cebb1c00988c17ee20 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-52761 · Vendor Advisory
• https://git.kernel.org/stable/c/be97d0db5f44c0674480cb79ac6f5b0529b84c76 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-52761 · Vendor Advisory