CVE-2023-53694

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the RISCV architecture related to ftrace and kernel preemption. The issue arises from the use of an AUIPC + JALR instruction pair to encode an immediate, which can lead to errors when kernel preemption is enabled and code patching with stop machine() is involved. Specifically, if a task is switched out during an AUIPC instruction and the ftrace function is modified before the task is switched back, the jump may target an address with updated bits, potentially causing a panic. The affected code area involves dynamic ftrace prologue operations, including instructions like REG S, auipc, jalr, and REG L.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.