In the Linux kernel, the following vulnerability has been resolved:
x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()
The code calling ima_free_kexec_buffer() runs long after the memblock
allocator has already been torn down, potentially resulting in a use
after free in memblock_isolate_range().
With KASAN or KFENCE, this use after free will result in a BUG
from the idle task, and a subsequent kernel panic.
Switch ima_free_kexec_buffer() over to memblock_free_late() to avoid
that bug.
References
Configurations
Configuration 1 (hide)
|
History
08 Apr 2025, 15:04
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:linux:linux_kernel:6.6:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.6:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
|
| First Time |
Linux linux Kernel
Linux |
|
| References | () https://git.kernel.org/stable/c/34cf99c250d5cd2530b93a57b0de31d3aaf8685b - Patch | |
| References | () https://git.kernel.org/stable/c/d2dfbc0e3b7a04c2d941421a958dc31c897fb204 - Patch | |
| References | () https://git.kernel.org/stable/c/eef16bfdb212da60f5144689f2967fb25b051a2b - Patch |
21 Nov 2024, 08:40
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://git.kernel.org/stable/c/34cf99c250d5cd2530b93a57b0de31d3aaf8685b - | |
| References | () https://git.kernel.org/stable/c/d2dfbc0e3b7a04c2d941421a958dc31c897fb204 - | |
| References | () https://git.kernel.org/stable/c/eef16bfdb212da60f5144689f2967fb25b051a2b - |
01 Nov 2024, 16:35
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-416 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
02 Mar 2024, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-02 22:15
Updated : 2025-04-08 15:04
NVD link : CVE-2023-52576
Mitre link : CVE-2023-52576
CVE.ORG link : CVE-2023-52576
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-416
Use After Free