NetSight
IP …
high7.8

CVE-2023-52606

In the Linux kernel, the following vulnerability has been resolved: powerpc/lib: Validate size for vector operations Some of the fp/vmx code in sstep.c assume …

Impact

In the Linux kernel, the following vulnerability has been resolved: powerpc/lib: Validate size for vector operations Some of the fp/vmx code in sstep.c assume a certain maximum size for the instructions being emulated. The size of those operations however is determined separately in analyse_instr(). Add a check to validate the assumption on the maximum size of the operations, so as to prevent any unintended kernel stack corruption.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.19.307
from 4.20 before 5.4.269
from 5.5 before 5.10.210
from 5.11 before 5.15.149
from 5.16 before 6.1.77
from 6.2 before 6.6.16

Weakness classification

CWE-770

References