NetSight
medium5.5

CVE-2023-52619

In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Fix crash when setting number of cpus to an odd number When the number of cpu c…

Impact

In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Fix crash when setting number of cpus to an odd number When the number of cpu cores is adjusted to 7 or other odd numbers, the zone size will become an odd number. The address of the zone will become: addr of zone0 = BASE addr of zone1 = BASE + zone_size addr of zone2 = BASE + zone_size*2 ... The address of zone1/3/5/7 will be mapped to non-alignment va. Eventually crashes will occur when accessing these va. So, use ALIGN_DOWN() to make sure the zone size is even to avoid this bug.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.19.307
from 4.20 before 5.4.269
from 5.5 before 5.10.210
from 5.11 before 5.15.149
from 5.16 before 6.1.77
from 6.2 before 6.6.16
DebianDebian Linux
Version 10.0

References