CVE-2023-52794

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52794

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: thermal: intel: powerclamp: fix mismatch in get function for max_idle KASAN reported this [ 444.853098] BUG: KASAN: global-out-of-bounds in param_get_int+0x77/0x90 [ 444.853111] Read of size 4 at addr ffffffffc16c9220 by task cat/2105 ... [ 444.853442] The buggy address belongs to the variable: [ 444.853443] max_idle+0x0/0xffffffffffffcde0 [intel_powerclamp] There is a mismatch between the param_get_int and the definition of max_idle. Replacing param_get_int with param_get_byte resolves this issue.

References
Link Resource
https://git.kernel.org/stable/c/0a8585281b11e3a0723bba8d8085d61f0b55f37c Patch
https://git.kernel.org/stable/c/6a3866dbdcf39ac93e98708e6abced511733dc18 Patch
https://git.kernel.org/stable/c/fae633cfb729da2771b5433f6b84ae7e8b4aa5f7 Patch
https://git.kernel.org/stable/c/0a8585281b11e3a0723bba8d8085d61f0b55f37c Patch
https://git.kernel.org/stable/c/6a3866dbdcf39ac93e98708e6abced511733dc18 Patch
https://git.kernel.org/stable/c/fae633cfb729da2771b5433f6b84ae7e8b4aa5f7 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

06 Mar 2025, 12:57

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0a8585281b11e3a0723bba8d8085d61f0b55f37c - () https://git.kernel.org/stable/c/0a8585281b11e3a0723bba8d8085d61f0b55f37c - Patch
References () https://git.kernel.org/stable/c/6a3866dbdcf39ac93e98708e6abced511733dc18 - () https://git.kernel.org/stable/c/6a3866dbdcf39ac93e98708e6abced511733dc18 - Patch
References () https://git.kernel.org/stable/c/fae633cfb729da2771b5433f6b84ae7e8b4aa5f7 - () https://git.kernel.org/stable/c/fae633cfb729da2771b5433f6b84ae7e8b4aa5f7 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1
First Time Linux
Linux linux Kernel
CWE CWE-125
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

21 Nov 2024, 08:40

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: térmica: intel: powerclamp: corrige la falta de coincidencia en la función get para max_idle KASAN informó esto [444.853098] BUG: KASAN: global-fuera de los límites en param_get_int+0x77/0x90 [444.853111 ] Lectura de tamaño 4 en addr ffffffffc16c9220 por tarea cat/2105... [444.853442] La dirección con errores pertenece a la variable: [444.853443] max_idle+0x0/0xffffffffffffffcde0 [intel_powerclamp] Hay una discrepancia entre param_get_int y la definición de max_idle . Reemplazar param_get_int con param_get_byte resuelve este problema.
References () https://git.kernel.org/stable/c/0a8585281b11e3a0723bba8d8085d61f0b55f37c - () https://git.kernel.org/stable/c/0a8585281b11e3a0723bba8d8085d61f0b55f37c -
References () https://git.kernel.org/stable/c/6a3866dbdcf39ac93e98708e6abced511733dc18 - () https://git.kernel.org/stable/c/6a3866dbdcf39ac93e98708e6abced511733dc18 -
References () https://git.kernel.org/stable/c/fae633cfb729da2771b5433f6b84ae7e8b4aa5f7 - () https://git.kernel.org/stable/c/fae633cfb729da2771b5433f6b84ae7e8b4aa5f7 -

21 May 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-21 16:15

Updated : 2025-03-06 12:57

NVD link : CVE-2023-52794

Mitre link : CVE-2023-52794

CVE.ORG link : CVE-2023-52794

JSON object : View

Products Affected

linux

CWE
CWE-125

Out-of-bounds Read