CVE-2023-52606: powerpc/lib: Validate size for vector operations
In the Linux kernel, the following vulnerability has been resolved:
powerpc/lib: Validate size for vector operations
Some of the fp/vmx code in sstep.c assume a certain maximum size for the instructions being emulated. The size of those operations however is determined separately in analyseinstr().
Add a check to validate the assumption on the maximum size of the operations, so as to prevent any unintended kernel stack corruption.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
powerpc/lib: Validate size for vector operations
The Linux kernel CVE team has assigned CVE-2023-52606 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024030647-CVE-2023-52606-fdcc@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52606?
CVE-2023-52606 is rated as a high severity vulnerability affecting the Linux kernel's vector operations.
How do I fix CVE-2023-52606?
To fix CVE-2023-52606, update your Linux kernel to one of the remedied versions such as 4.19.307, 5.4.269, 5.10.210, 5.15.149, 6.1.77, 6.6.16, 6.7.4, or 6.8.
Which Linux kernel versions are affected by CVE-2023-52606?
CVE-2023-52606 affects various 4.x, 5.x, and 6.x versions of the Linux kernel prior to the patches including 4.19.307, 5.4.269, 5.10.210, 5.15.149, 6.1.77, 6.6.16, and later versions.
What types of systems are vulnerable to CVE-2023-52606?
Systems running vulnerable versions of the Linux kernel, particularly those utilizing powerpc architecture, are at risk from CVE-2023-52606.
Is there a public fix available for CVE-2023-52606?
Yes, public fixes are available in the form of updated kernel versions that address the vulnerabilities outlined in CVE-2023-52606.