PT-2025-13324 · Linux+2 · Linux Kernel+2
CVE-2023-52978
·
Publicado
2023-01-31
·
Atualizado
2025-05-28
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to the fixed version
Description
A vulnerability in the Linux kernel has been resolved, which previously caused a kernel panic when probing an illegal position. This occurred when the kprobe's ebreak instruction broke the kernel's original code. The issue is related to the
arch prepare kprobe function, where an arch check kprobe was added to prevent probing at an illegal position, such as the middle of an instruction.Recommendations
For Linux kernel versions prior to the fixed version, apply the patch that adds
arch check kprobe in arch prepare kprobe to prevent kernel panic when probing an illegal position.
As a temporary workaround, consider avoiding the use of kprobes that may probe illegal positions until a patch is available.Exploit
Correção
Improper Initialization
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Astra Linux
Linux Kernel
Red Os