Ubuntu: (CVE-2023-52816): linux vulnerability

Ubuntu: (CVE-2023-52816): linux vulnerability

Severity

4

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

05/21/2024

Created

11/21/2024

Added

11/19/2024

Modified

02/11/2025

Description

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix shift out-of-bounds issue [567.613292] shift exponent 255 is too large for 64-bit type 'long unsigned int' [567.614498] CPU: 5 PID: 238 Comm: kworker/5:1 Tainted: G OE6.2.0-34-generic #34~22.04.1-Ubuntu [567.614502] Hardware name: AMD Splinter/Splinter-RPL, BIOS WS43927N_871 09/25/2023 [567.614504] Workqueue: events send_exception_work_handler [amdgpu] [567.614748] Call Trace: [567.614750]<TASK> [567.614753]dump_stack_lvl+0x48/0x70 [567.614761]dump_stack+0x10/0x20 [567.614763]__ubsan_handle_shift_out_of_bounds+0x156/0x310 [567.614769]? srso_alias_return_thunk+0x5/0x7f [567.614773]? update_sd_lb_stats.constprop.0+0xf2/0x3c0 [567.614780]svm_range_split_by_granularity.cold+0x2b/0x34 [amdgpu] [567.615047]? srso_alias_return_thunk+0x5/0x7f [567.615052]svm_migrate_to_ram+0x185/0x4d0 [amdgpu] [567.615286]do_swap_page+0x7b6/0xa30 [567.615291]? srso_alias_return_thunk+0x5/0x7f [567.615294]? __free_pages+0x119/0x130 [567.615299]handle_pte_fault+0x227/0x280 [567.615303]__handle_mm_fault+0x3c0/0x720 [567.615311]handle_mm_fault+0x119/0x330 [567.615314]? lock_mm_and_find_vma+0x44/0x250 [567.615318]do_user_addr_fault+0x1a9/0x640 [567.615323]exc_page_fault+0x81/0x1b0 [567.615328]asm_exc_page_fault+0x27/0x30 [567.615332] RIP: 0010:__get_user_8+0x1c/0x30

Solution(s)

• ubuntu-upgrade-linux
• ubuntu-upgrade-linux-aws
• ubuntu-upgrade-linux-aws-5-15
• ubuntu-upgrade-linux-aws-fips
• ubuntu-upgrade-linux-azure
• ubuntu-upgrade-linux-azure-5-15
• ubuntu-upgrade-linux-azure-fde
• ubuntu-upgrade-linux-azure-fde-5-15
• ubuntu-upgrade-linux-bluefield
• ubuntu-upgrade-linux-fips
• ubuntu-upgrade-linux-gcp
• ubuntu-upgrade-linux-gcp-5-15
• ubuntu-upgrade-linux-gcp-fips
• ubuntu-upgrade-linux-gke
• ubuntu-upgrade-linux-gkeop
• ubuntu-upgrade-linux-gkeop-5-15
• ubuntu-upgrade-linux-hwe-5-15
• ubuntu-upgrade-linux-ibm
• ubuntu-upgrade-linux-ibm-5-15
• ubuntu-upgrade-linux-intel-iot-realtime
• ubuntu-upgrade-linux-intel-iotg
• ubuntu-upgrade-linux-intel-iotg-5-15
• ubuntu-upgrade-linux-kvm
• ubuntu-upgrade-linux-lowlatency
• ubuntu-upgrade-linux-lowlatency-hwe-5-15
• ubuntu-upgrade-linux-nvidia
• ubuntu-upgrade-linux-nvidia-6-5
• ubuntu-upgrade-linux-oracle
• ubuntu-upgrade-linux-oracle-5-15
• ubuntu-upgrade-linux-raspi
• ubuntu-upgrade-linux-realtime
• ubuntu-upgrade-linux-riscv-5-15
• ubuntu-upgrade-linux-xilinx-zynqmp

References

• https://attackerkb.com/topics/cve-2023-52816
• CVE - 2023-52816
• https://git.kernel.org/linus/282c1d793076c2edac6c3db51b7e8ed2b41d60a5
• https://git.kernel.org/stable/c/2806f880379232e789957c2078d612669eb7a69c
• https://git.kernel.org/stable/c/282c1d793076c2edac6c3db51b7e8ed2b41d60a5
• https://git.kernel.org/stable/c/3f7a400d5e80f99581e3e8a9843e1f6118bf454f
• https://git.kernel.org/stable/c/56649c43d40ce0147465a2d5756d300e87f9ee1c
• https://git.kernel.org/stable/c/d33a35b13cbfec3238043f196fa87a6384f9d087
• https://www.cve.org/CVERecord?id=CVE-2023-52816

View more