PT-2024-14753 · Linux+2 · Linux Kernel+2

Alexandre Ghiti · Published 2023-11-09 · Updated 2026-03-13 · CVE-2023-52797

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel version 6.6.0-rc6ubuntu-defconfig #2

Description The issue arises from the failure to check the return value of find first bit() before using it as an index array, leading to an array overflow and subsequent panic. This occurs in the pmu sbi ovf handler() function. The vulnerability causes a kernel panic due to a fatal exception in interrupt handling.

Recommendations To resolve this issue, ensure that the return value of find first bit() is properly checked before using it as an index array to prevent overflow and panic. As a temporary workaround, consider disabling the pmu sbi ovf handler() function until a patch is available. Update to a newer version of the Linux kernel that includes the fix for this vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unchecked Return Value

Weakness Enumeration

CWE-252

Related Identifiers

BDU:2025-15392

CVE-2023-52797

ECHO-902D-3A16-FD64

Affected Products

Astra Linux

Debian

Linux Kernel

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52797.json · Exploit
• https://osv.dev/vulnerability/BELL-CVE-2023-52797 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-52797 · Vendor Advisory
• https://git.kernel.org/stable/c/45a0de41ec383c8b7c6d442734ba3852dd2fc4a7 · Patch
• https://ubuntu.com/security/CVE-2023-52797 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2023-52797 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-52797 · Vendor Advisory
• https://git.kernel.org/stable/c/2c86b24095fcf72cf51bc72d12e4350163b4e11d · Patch
• https://cve.org/CVERecord?id=CVE-2023-52797 · Security Note
• https://git.kernel.org/stable/c/c6e316ac05532febb0c966fa9b55f5258ed037be · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-52797 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-52797 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-15392 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52797 · Security Note
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.3 · Note