CVE-2023-53702

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.0-rc7+

Description The Linux kernel contains a flaw in the s390/crypto component related to ChaCha20. Specifically, the code lacks a check to verify if the necessary vector instructions are available before branching into the assembler code. If the kernel is compiled without vector instruction support, this can lead to a data exception and a kernel panic. The issue occurs when the chacha20 vx function is called, potentially causing a system crash.

Recommendations Versions prior to 6.3.0-rc7 should be updated.