PT-2025-43103 · Linux · Linux Kernel
Published
2023-05-15
·
Updated
2026-05-26
·
CVE-2023-53702
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.3.0-rc7+
Description
The Linux kernel contains a flaw in the s390/crypto component related to ChaCha20. Specifically, the code lacks a check to verify if the necessary vector instructions are available before branching into the assembler code. If the kernel is compiled without vector instruction support, this can lead to a data exception and a kernel panic. The issue occurs when the
chacha20 vx function is called, potentially causing a system crash.Recommendations
Versions prior to 6.3.0-rc7 should be updated.
Exploit
Fix
Improper Resource Release
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel