|
ELS
< Back

CVE-2023-52462

Updated on 23 Feb 2024

Severity

5.5 Medium severity

Details

CVSS score
5.5
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CWE ID
Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

bpf: fix check for attempt to corrupt spilled pointer

When register is spilled onto a stack as a 1/2/4-byte register, we set slot_type[BPF_REG_SIZE - 1] (plus potentially few more below it, depending on actual spill size). So to check if some stack slot has spilled register we need to consult slot_type[7], not slot_type[0].

To avoid the need to remember and double-check this in the future, just use is_spilled_reg() helper.

Details

Affected product:
AlmaLinux 9.2 ESU , Amazon Linux 2 ELS , CentOS 6 ELS , CentOS 7 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , CloudLinux 6 ELS , CloudLinux 7 ELS , Debian 10 ELS , Oracle Linux 6 ELS , Oracle Linux 7 ELS , RHEL 7 ELS , TuxCare 9.6 ESU , TuxCare 9.8 ESU , Ubuntu 16.04 ELS , Ubuntu 18.04 ELS , Ubuntu 20.04 ELS
Affected packages:
kernel @ 4.18.0 (+19 more)

Fixes

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
AlmaLinux 9 Released
33 kernels
  • 5.14.0-162.18.1.el9_1
  • 5.14.0-162.22.2.el9_1
  • 5.14.0-162.23.1.el9_1
  • 5.14.0-162.6.1.el9_1
  • 5.14.0-284.11.1.el9_2
  • 5.14.0-284.18.1.el9_2
  • 5.14.0-284.25.1.el9_2
  • 5.14.0-284.30.1.el9_2
  • 5.14.0-362.13.1.el9_3
  • 5.14.0-362.18.1.el9_3
  • 5.14.0-362.24.1.el9_3
  • 5.14.0-362.24.2.el9_3
  • 5.14.0-362.8.1.el9_3
  • 5.14.0-427.13.1.el9_4
  • 5.14.0-427.16.1.el9_4
  • 5.14.0-427.18.1.el9_4
  • 5.14.0-427.20.1.el9_4
  • 5.14.0-427.22.1.el9_4
  • 5.14.0-427.24.1.el9_4
  • 5.14.0-427.26.1.el9_4
  • 5.14.0-427.28.1.el9_4
  • 5.14.0-427.31.1.el9_4
  • 5.14.0-427.33.1.el9_4
  • 5.14.0-427.35.1.el9_4
  • 5.14.0-427.37.1.el9_4
  • 5.14.0-427.40.1.el9_4
  • 5.14.0-427.42.1.el9_4
  • 5.14.0-70.13.1.el9_0
  • 5.14.0-70.17.1.el9_0
  • 5.14.0-70.22.1.el9_0
  • 5.14.0-70.26.1.el9_0
  • 5.14.0-70.30.1.el9_0
  • 5.14.0-162.12.1.el9_1
Amazon Linux 2023 Planned —
Amazon Linux 2 5.10 Will Not Fix —
Oracle Linux 9 Released
39 kernels
  • 5.14.0-162.12.1.el9_1
  • 5.14.0-162.18.1.el9_1
  • 5.14.0-162.22.2.el9_1
  • 5.14.0-162.23.1.el9_1
  • 5.14.0-162.6.1.el9_1
  • 5.14.0-284.11.1.el9_2
  • 5.14.0-284.18.1.el9_2
  • 5.14.0-284.25.1.0.1.el9_2
  • 5.14.0-284.25.1.el9_2
  • 5.14.0-284.30.0.1.el9_2
  • 5.14.0-284.30.1.el9_2
  • 5.14.0-362.13.0.1.el9_3
  • 5.14.0-362.13.1.el9_3
  • 5.14.0-362.18.0.1.el9_3
  • 5.14.0-362.18.0.2.el9_3
  • 5.14.0-362.18.1.el9_3
  • 5.14.0-362.24.1.0.1.el9_3
  • 5.14.0-362.24.1.0.2.el9_3
  • 5.14.0-362.24.1.el9_3
  • 5.14.0-362.8.1.el9_3
  • 5.14.0-427.13.1.el9_4
  • 5.14.0-427.16.1.el9_4
  • 5.14.0-427.18.1.el9_4
  • 5.14.0-427.20.1.el9_4
  • 5.14.0-427.22.1.el9_4
  • 5.14.0-427.24.1.el9_4
  • 5.14.0-427.26.1.el9_4
  • 5.14.0-427.28.1.el9_4
  • 5.14.0-427.31.1.el9_4
  • 5.14.0-427.33.1.el9_4
  • 5.14.0-427.35.1.el9_4
  • 5.14.0-427.37.1.el9_4
  • 5.14.0-427.40.1.el9_4
  • 5.14.0-427.42.1.el9_4
  • 5.14.0-70.13.1.0.3.el9_0
  • 5.14.0-70.17.1.0.1.el9_0
  • 5.14.0-70.22.1.0.1.el9_0
  • 5.14.0-70.26.1.0.1.el9_0
  • 5.14.0-70.30.1.0.1.el9_0
Proxmox VE 7 5.15 Released
14 kernels
  • 5.15.104-1-pve-5.15.104-1
  • 5.15.104-1-pve-5.15.104-2
  • 5.15.107-1-pve-5.15.107-1
  • 5.15.107-2-pve-5.15.107-2
  • 5.15.108-1-pve-5.15.108-1
  • 5.15.108-1-pve-5.15.108-2
  • 5.15.116-1-pve-5.15.116-1
  • 5.15.126-1-pve-5.15.126-1
  • 5.15.131-1-pve-5.15.131-1
  • 5.15.131-1-pve-5.15.131-2
  • 5.15.131-2-pve-5.15.131-3
  • 5.15.136-1-pve-5.15.136-1
  • 5.15.111-1-pve-5.15.111-1
  • 5.15.143-1-pve-5.15.143-1
RHEL 9 Released
33 kernels
  • 5.14.0-162.12.1.el9_1
  • 5.14.0-162.18.1.el9_1
  • 5.14.0-162.22.2.el9_1
  • 5.14.0-162.23.1.el9_1
  • 5.14.0-162.6.1.el9_1
  • 5.14.0-284.11.1.el9_2
  • 5.14.0-284.18.1.el9_2
  • 5.14.0-284.25.1.el9_2
  • 5.14.0-284.30.1.el9_2
  • 5.14.0-362.13.1.el9_3
  • 5.14.0-362.18.1.el9_3
  • 5.14.0-362.24.1.el9_3
  • 5.14.0-362.8.1.el9_3
  • 5.14.0-427.13.1.el9_4
  • 5.14.0-427.16.1.el9_4
  • 5.14.0-427.18.1.el9_4
  • 5.14.0-427.20.1.el9_4
  • 5.14.0-427.22.1.el9_4
  • 5.14.0-427.24.1.el9_4
  • 5.14.0-427.26.1.el9_4
  • 5.14.0-427.28.1.el9_4
  • 5.14.0-427.31.1.el9_4
  • 5.14.0-427.33.1.el9_4
  • 5.14.0-427.35.1.el9_4
  • 5.14.0-427.37.1.el9_4
  • 5.14.0-427.40.1.el9_4
  • 5.14.0-427.42.1.el9_4
  • 5.14.0-70.13.1.el9_0
  • 5.14.0-70.17.1.el9_0
  • 5.14.0-70.22.1.el9_0
  • 5.14.0-70.26.1.el9_0
  • 5.14.0-70.30.1.el9_0
  • 5.14.0-70.5.1.el9_0
Rocky Linux 9 Released
33 kernels
  • 5.14.0-162.12.1.el9_1.0.1
  • 5.14.0-162.12.1.el9_1.0.2
  • 5.14.0-162.18.1.el9_1
  • 5.14.0-162.22.2.el9_1
  • 5.14.0-162.23.1.el9_1
  • 5.14.0-162.6.1.el9_1.0.1
  • 5.14.0-162.6.1.el9_1
  • 5.14.0-284.30.1.el9_2
  • 5.14.0-362.13.1.el9_3
  • 5.14.0-362.18.1.el9_3.0.1
  • 5.14.0-362.18.1.el9_3
  • 5.14.0-362.24.1.el9_3.0.1
  • 5.14.0-362.24.1.el9_3
  • 5.14.0-362.8.1.el9_3
  • 5.14.0-427.16.1.el9_4
  • 5.14.0-427.18.1.el9_4
  • 5.14.0-427.20.1.el9_4.0.1
  • 5.14.0-427.20.1.el9_4
  • 5.14.0-427.22.1.el9_4
  • 5.14.0-427.24.1.el9_4
  • 5.14.0-427.26.1.el9_4
  • 5.14.0-427.28.1.el9_4
  • 5.14.0-427.31.1.el9_4
  • 5.14.0-427.33.1.el9_4
  • 5.14.0-427.35.1.el9_4
  • 5.14.0-427.37.1.el9_4
  • 5.14.0-427.40.1.el9_4
  • 5.14.0-427.42.1.el9_4
  • 5.14.0-70.22.1.el9_0
  • 5.14.0-70.26.1.el9_0
  • 5.14.0-70.30.1.el9_0
  • 5.14.0-284.11.1.el9_2
  • 5.14.0-427.13.1.el9_4
Ubuntu 20.04 HWE AWS Released
21 kernels
  • 5.15.0-1033.37~20.04.1
  • 5.15.0-1034.38~20.04.1
  • 5.15.0-1035.39~20.04.1
  • 5.15.0-1036.40~20.04.1
  • 5.15.0-1037.41~20.04.1
  • 5.15.0-1038.43~20.04.1
  • 5.15.0-1039.44~20.04.1
  • 5.15.0-1040.45~20.04.1
  • 5.15.0-1041.46~20.04.1
  • 5.15.0-1043.48~20.04.1
  • 5.15.0-1044.49~20.04.1
  • 5.15.0-1045.50~20.04.1
  • 5.15.0-1047.52~20.04.1
  • 5.15.0-1048.53~20.04.1
  • 5.15.0-1049.54~20.04.1
  • 5.15.0-1050.55~20.04.1
  • 5.15.0-1051.56~20.04.1
  • 5.15.0-1052.57~20.04.1
  • 5.15.0-1053.58~20.04.1
  • 5.15.0-1055.60~20.04.1
  • 5.15.0-1056.61~20.04.1
Ubuntu 20.04 HWE Azure Released
7 kernels
  • 5.15.0-1049.56~20.04.1
  • 5.15.0-1050.57~20.04.1
  • 5.15.0-1054.62~20.04.1
  • 5.15.0-1056.64~20.04.1
  • 5.15.0-1057.65~20.04.1
  • 5.15.0-1058.66~20.04.2
  • 5.15.0-1059.67~20.04.1
Ubuntu 22.04 Released
24 kernels
  • 5.15.0-100.110
  • 5.15.0-101.111
  • 5.15.0-68.75
  • 5.15.0-69.76
  • 5.15.0-70.77
  • 5.15.0-71.78
  • 5.15.0-72.79
  • 5.15.0-73.80
  • 5.15.0-74.81
  • 5.15.0-75.82
  • 5.15.0-76.83
  • 5.15.0-78.85
  • 5.15.0-79.86
  • 5.15.0-82.91
  • 5.15.0-83.92
  • 5.15.0-84.93
  • 5.15.0-86.96
  • 5.15.0-87.97
  • 5.15.0-88.98
  • 5.15.0-89.99
  • 5.15.0-91.101
  • 5.15.0-92.102
  • 5.15.0-94.104
  • 5.15.0-97.107
Ubuntu 22.04 AWS Released
22 kernels
  • 5.15.0-1052.57
  • 5.15.0-1053.58
  • 5.15.0-1055.60
  • 5.15.0-1056.61
  • 5.15.0-1032.36
  • 5.15.0-1033.37
  • 5.15.0-1034.38
  • 5.15.0-1035.39
  • 5.15.0-1036.40
  • 5.15.0-1037.41
  • 5.15.0-1038.43
  • 5.15.0-1039.44
  • 5.15.0-1040.45
  • 5.15.0-1042.47
  • 5.15.0-1043.48
  • 5.15.0-1044.49
  • 5.15.0-1045.50
  • 5.15.0-1047.52
  • 5.15.0-1048.53
  • 5.15.0-1049.54
  • 5.15.0-1050.55
  • 5.15.0-1051.56
Ubuntu 22.04 Azure Released
22 kernels
  • 5.15.0-1059.67
  • 5.15.0-1035.42
  • 5.15.0-1036.43
  • 5.15.0-1037.44
  • 5.15.0-1038.45
  • 5.15.0-1039.46
  • 5.15.0-1040.47
  • 5.15.0-1041.48
  • 5.15.0-1042.49
  • 5.15.0-1044.51
  • 5.15.0-1045.52
  • 5.15.0-1046.53
  • 5.15.0-1047.54
  • 5.15.0-1049.56
  • 5.15.0-1050.57
  • 5.15.0-1051.59
  • 5.15.0-1052.60
  • 5.15.0-1053.61
  • 5.15.0-1054.62
  • 5.15.0-1056.64
  • 5.15.0-1057.65
  • 5.15.0-1058.66