PT-2023-9766
CVE-2023-52750
·
تاريخ النشر
2023-10-04
·
تاريخ التحديث
2025-02-03
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.0-rc3-00013-g34f66c4c4d55
Description
The vulnerability is related to the incorrect byte-swapping of NOP instructions when compiling for big-endian architectures using LLVM's integrated assembler prior to version 15.0.0. This could result in the corruption of user or kernel FPSIMD state. The issue was unnoticed until a commit was made to use a positive cpucap for FP/SIMD, after which the instructions would trap during boot prior to FPSIMD being detected and enabled.
Recommendations
To resolve the issue, restrict CONFIG CPU BIG ENDIAN to a known good assembler, which is either GNU as or LLVM's IAS 15.0.0 and newer. This can be achieved by:
- Using GNU as for assembly
- Updating to LLVM's IAS 15.0.0 or newer for assembly No specific version of the Linux kernel is recommended for update, as the fix is related to the assembler used rather than the kernel version itself. However, using a version of the Linux kernel that includes the commit "arm64: Use a positive cpucap for FP/SIMD" (34f66c4c4d5518c1) or later would be advisable to ensure the issue is properly handled.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾