VMware Photon OS: CVE-2023-52619

VMware Photon OS: CVE-2023-52619

Severity

4

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

03/18/2024

Created

01/21/2025

Added

01/20/2025

Modified

01/20/2025

Description

In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Fix crash when setting number of cpus to an odd number When the number of cpu cores is adjusted to 7 or other odd numbers, the zone size will become an odd number. The address of the zone will become: addr of zone0 = BASE addr of zone1 = BASE + zone_size addr of zone2 = BASE + zone_size*2 ... The address of zone1/3/5/7 will be mapped to non-alignment va. Eventually crashes will occur when accessing these va. So, use ALIGN_DOWN() to make sure the zone size is even to avoid this bug.

Solution(s)

• vmware-photon_os_update_tdnf

References

• https://attackerkb.com/topics/cve-2023-52619
• CVE - 2023-52619