PT-2023-9766

CVE-2023-52750

Publicado

2023-10-04

Atualizado

2025-02-03

Descrição por

CVSS 3.1

7.8

Alta

MétricasAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.0-rc3-00013-g34f66c4c4d55

Description The vulnerability is related to the incorrect byte-swapping of NOP instructions when compiling for big-endian architectures using LLVM's integrated assembler prior to version 15.0.0. This could result in the corruption of user or kernel FPSIMD state. The issue was unnoticed until a commit was made to use a positive cpucap for FP/SIMD, after which the instructions would trap during boot prior to FPSIMD being detected and enabled.

Recommendations To resolve the issue, restrict CONFIG CPU BIG ENDIAN to a known good assembler, which is either GNU as or LLVM's IAS 15.0.0 and newer. This can be achieved by:

Using GNU as for assembly
Updating to LLVM's IAS 15.0.0 or newer for assembly No specific version of the Linux kernel is recommended for update, as the fix is related to the assembler used rather than the kernel version itself. However, using a version of the Linux kernel that includes the commit "arm64: Use a positive cpucap for FP/SIMD" (34f66c4c4d5518c1) or later would be advisable to ensure the issue is properly handled.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Fornecedores