PT-2025-13336 · Linux+1 · Linux Kernel+1

Published 2025-03-27 · Updated 2025-03-28 · CVE-2023-52990

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to an invalid out of bounds read warning generated by GCC 11.1.0 and 11.2.0 when compiling the kernel. The issue arises from the memcpy function in the setup lowcore dat on function in arch/s390/kernel/setup.c. To address this, a for loop is used to copy the array in question, eliminating the warning.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2025-14102

CVE-2023-52990

Affected Products

Debian

Linux Kernel

References · 13

• https://ubuntu.com/security/CVE-2023-52990 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-52990 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-52990 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-52990 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-52990 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52990 · Security Note
• https://bdu.fstec.ru/vul/2025-14102 · Security Note
• https://git.kernel.org/stable/c/41e1992665a2701fa025a8b76970c43b4148446f · Note
• https://git.kernel.org/linus/41e1992665a2701fa025a8b76970c43b4148446f · Note
• https://lore.kernel.org/linux-cve-announce/2025032708-CVE-2023-52990-befd@gregkh · Note
• https://git.kernel.org/stable/c/1fc24f9da259b675c3cc74ad5aa92dac286543b3 · Note
• https://twitter.com/CVEnew/status/1905361850042110155 · Twitter Post
• https://access.redhat.com/security/cve/CVE-2023-52990 · Note