CVE-2023-52831

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52831
In the Linux kernel, the following vulnerability has been resolved: cpu/hotplug: Don't offline the last non-isolated CPU If a system has isolated CPUs via the "isolcpus=" command line parameter, then an attempt to offline the last housekeeping CPU will result in a WARN_ON() when rebuilding the scheduler domains and a subsequent panic due to and unhandled empty CPU mas in partition_sched_domains_locked(). cpuset_hotplug_workfn() rebuild_sched_domains_locked() ndoms = generate_sched_domains(&doms, &attr); cpumask_and(doms[0], top_cpuset.effective_cpus, housekeeping_cpumask(HK_FLAG_DOMAIN)); Thus results in an empty CPU mask which triggers the warning and then the subsequent crash: WARNING: CPU: 4 PID: 80 at kernel/sched/topology.c:2366 build_sched_domains+0x120c/0x1408 Call trace: build_sched_domains+0x120c/0x1408 partition_sched_domains_locked+0x234/0x880 rebuild_sched_domains_locked+0x37c/0x798 rebuild_sched_domains+0x30/0x58 cpuset_hotplug_workfn+0x2a8/0x930 Unable to handle kernel paging request at virtual address fffe80027ab37080 partition_sched_domains_locked+0x318/0x880 rebuild_sched_domains_locked+0x37c/0x798 Aside of the resulting crash, it does not make any sense to offline the last last housekeeping CPU. Prevent this by masking out the non-housekeeping CPUs when selecting a target CPU for initiating the CPU unplug operation via the work queue.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3073f6df783d9d75f7f69f73e16c7ef85d6cfb63 Patch
https://git.kernel.org/stable/c/335a47ed71e332c82339d1aec0c7f6caccfcda13 Patch
https://git.kernel.org/stable/c/3410b702354702b500bde10e3cc1f9db8731d908 Patch
https://git.kernel.org/stable/c/38685e2a0476127db766f81b1c06019ddc4c9ffa Patch
https://git.kernel.org/stable/c/3073f6df783d9d75f7f69f73e16c7ef85d6cfb63 Patch
https://git.kernel.org/stable/c/335a47ed71e332c82339d1aec0c7f6caccfcda13 Patch
https://git.kernel.org/stable/c/3410b702354702b500bde10e3cc1f9db8731d908 Patch
https://git.kernel.org/stable/c/38685e2a0476127db766f81b1c06019ddc4c9ffa Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

23 Sep 2025, 22:46

Type Values Removed Values Added
CWE CWE-617
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/3073f6df783d9d75f7f69f73e16c7ef85d6cfb63 - () https://git.kernel.org/stable/c/3073f6df783d9d75f7f69f73e16c7ef85d6cfb63 - Patch
References () https://git.kernel.org/stable/c/335a47ed71e332c82339d1aec0c7f6caccfcda13 - () https://git.kernel.org/stable/c/335a47ed71e332c82339d1aec0c7f6caccfcda13 - Patch
References () https://git.kernel.org/stable/c/3410b702354702b500bde10e3cc1f9db8731d908 - () https://git.kernel.org/stable/c/3410b702354702b500bde10e3cc1f9db8731d908 - Patch
References () https://git.kernel.org/stable/c/38685e2a0476127db766f81b1c06019ddc4c9ffa - () https://git.kernel.org/stable/c/38685e2a0476127db766f81b1c06019ddc4c9ffa - Patch

21 Nov 2024, 08:40

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/3073f6df783d9d75f7f69f73e16c7ef85d6cfb63 - () https://git.kernel.org/stable/c/3073f6df783d9d75f7f69f73e16c7ef85d6cfb63 -
References () https://git.kernel.org/stable/c/335a47ed71e332c82339d1aec0c7f6caccfcda13 - () https://git.kernel.org/stable/c/335a47ed71e332c82339d1aec0c7f6caccfcda13 -
References () https://git.kernel.org/stable/c/3410b702354702b500bde10e3cc1f9db8731d908 - () https://git.kernel.org/stable/c/3410b702354702b500bde10e3cc1f9db8731d908 -
References () https://git.kernel.org/stable/c/38685e2a0476127db766f81b1c06019ddc4c9ffa - () https://git.kernel.org/stable/c/38685e2a0476127db766f81b1c06019ddc4c9ffa -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: cpu/hotplug: no desconectar la última CPU no aislada. Si un sistema tiene CPU aisladas mediante el parámetro de línea de comando "isolcpus=", entonces se intenta desconectar la última limpieza La CPU dará como resultado un WARN_ON() al reconstruir los dominios del programador y un pánico posterior debido a una masa de CPU vacía no controlada en particion_sched_domains_locked(). cpuset_hotplug_workfn() build_sched_domains_locked() ndoms = generate_sched_domains(&doms, &attr); cpumask_and(doms[0], top_cpuset. Effective_cpus, housekeeping_cpumask(HK_FLAG_DOMAIN)); Por lo tanto, se genera una máscara de CPU vacía que activa la advertencia y luego el bloqueo posterior: ADVERTENCIA: CPU: 4 PID: 80 en kernel/sched/topology.c:2366 build_sched_domains+0x120c/0x1408 Seguimiento de llamadas: build_sched_domains+0x120c/0x1408 partition_sched_domains_locked+ 0x234/0x880 build_sched_domains_locked+0x37c/0x798 build_sched_domains+0x30/0x58 cpuset_hotplug_workfn+0x2a8/0x930 No se puede manejar la solicitud de paginación del kernel en la dirección virtual fffe80027ab37080 particion_sched_domains_locked+0x318/0x880 _sched_domains_locked+0x37c/0x798 Aparte del bloqueo resultante, no tiene ningún sentido para desconectar la última CPU de mantenimiento. Evite esto enmascarando las CPU que no son de mantenimiento al seleccionar una CPU de destino para iniciar la operación de desconexión de la CPU a través de la cola de trabajo.

21 May 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-21 16:15

Updated : 2025-09-23 22:46

NVD link : CVE-2023-52831

Mitre link : CVE-2023-52831

CVE.ORG link : CVE-2023-52831

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-617

Reachable Assertion