CVE-2023-52978— Linux kernel 安全漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2023-52978の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
riscv: kprobe: Fixup kernel panic when probing an illegal position
ソース: NVD (National Vulnerability Database)
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: riscv: kprobe: Fixup kernel panic when probing an illegal position The kernel would panic when probed for an illegal position. eg: (CONFIG_RISCV_ISA_C=n) echo 'p:hello kernel_clone+0x16 a0=%a0' >> kprobe_events echo 1 > events/kprobes/hello/enable cat trace Kernel panic - not syncing: stack-protector: Kernel stack is corrupted in: __do_sys_newfstatat+0xb8/0xb8 CPU: 0 PID: 111 Comm: sh Not tainted 6.2.0-rc1-00027-g2d398fe49a4d #490 Hardware name: riscv-virtio,qemu (DT) Call Trace: [<ffffffff80007268>] dump_backtrace+0x38/0x48 [<ffffffff80c5e83c>] show_stack+0x50/0x68 [<ffffffff80c6da28>] dump_stack_lvl+0x60/0x84 [<ffffffff80c6da6c>] dump_stack+0x20/0x30 [<ffffffff80c5ecf4>] panic+0x160/0x374 [<ffffffff80c6db94>] generic_handle_arch_irq+0x0/0xa8 [<ffffffff802deeb0>] sys_newstat+0x0/0x30 [<ffffffff800158c0>] sys_clone+0x20/0x30 [<ffffffff800039e8>] ret_from_syscall+0x0/0x4 ---[ end Kernel panic - not syncing: stack-protector: Kernel stack is corrupted in: __do_sys_newfstatat+0xb8/0xb8 ]--- That is because the kprobe's ebreak instruction broke the kernel's original code. The user should guarantee the correction of the probe position, but it couldn't make the kernel panic. This patch adds arch_check_kprobe in arch_prepare_kprobe to prevent an illegal position (Such as the middle of an instruction).
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于riscv kprobe组件在探测非法位置时导致内核恐慌。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2023-52978の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2023-52978のインテリジェンス情報
请登录查看更多情报信息。
Same Patch Batch · Linux · 2025-03-27 · 124 CVEs total
| CVE-2023-52982 | fscache: Use wait_on_bit() to wait for the freeing of relinquished volume | |
| CVE-2023-52998 | net: fec: Use page_pool_put_full_page when freeing rx buffers | |
| CVE-2023-52999 | net: fix UaF in netns ops registration error path | |
| CVE-2023-52997 | ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() | |
| CVE-2023-52996 | ipv4: prevent potential spectre v1 gadget in fib_metrics_match() | |
| CVE-2023-52995 | riscv/kprobe: Fix instruction simulation of JALR | |
| CVE-2023-52994 | acpi: Fix suspend with Xen PV | |
| CVE-2023-52993 | x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL | |
| CVE-2023-52992 | bpf: Skip task with pid=1 in send_signal_common() | |
| CVE-2023-52991 | net: fix NULL pointer in skb_segment_list | |
| CVE-2023-52989 | firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region | |
| CVE-2023-52988 | ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() | |
| CVE-2023-52987 | ASoC: SOF: ipc4-mtrace: prevent underflow in sof_ipc4_priority_mask_dfs_write() | |
| CVE-2023-52986 | bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener | |
| CVE-2023-52985 | arm64: dts: imx8mm-verdin: Do not power down eth-phy | |
| CVE-2023-52984 | net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices | |
| CVE-2022-49761 | btrfs: always report error in run_one_delayed_ref() | |
| CVE-2022-49760 | mm/hugetlb: fix PTE marker handling in hugetlb_change_protection() | |
| CVE-2022-49759 | VMCI: Use threaded irqs instead of tasklets | |
| CVE-2023-52973 | vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF |
Showing 20 of 124 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
同じベンダー: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
V. CVE-2023-52978へのコメント
まだコメントはありません