In the Linux kernel, the following vulnerability has been resolved:
powerpc/lib: Validate size for vector operations
Some of the fp/vmx code in sstep.c assume a certain maximum size for the instructions being emulated. The size of those operations however is determined separately in analyse_instr().
Add a check to validate the assumption on the maximum size of the operations, so as to prevent any unintended kernel stack corruption.
[
{
"id": "CVE-2023-52606-01b8e3af",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0580f4403ad33f379eef865c2a6fe94de37febdf",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_vec_store",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 570.0,
"function_hash": "100779242301702354044235582958661355169"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-0eaa8d75",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@beee482cc4c9a6b1dcffb2e190b4fd8782258678",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_vec_store",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 570.0,
"function_hash": "100779242301702354044235582958661355169"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-10974d99",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0580f4403ad33f379eef865c2a6fe94de37febdf",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_fp_store",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 968.0,
"function_hash": "128755470252710014782794845025775377897"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-27cdf5aa",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0580f4403ad33f379eef865c2a6fe94de37febdf",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_fp_load",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 1080.0,
"function_hash": "166490113653346571720087551836430599034"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-3086d042",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0580f4403ad33f379eef865c2a6fe94de37febdf",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_vec_load",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 612.0,
"function_hash": "271125530644281068404452802113491209024"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-317c6109",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8f9abaa6d7de0a70fc68acaedce290c1f96e2e59",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"326410570179984435160612002732301628883",
"180951862482277951258834813180567510672",
"78876271237640765917526038681563587135",
"111574388269106038217081314887509800109",
"326410570179984435160612002732301628883",
"180951862482277951258834813180567510672",
"78876271237640765917526038681563587135",
"111574388269106038217081314887509800109",
"221825287474066607392618835850066604324",
"79306805487343987080015729926715876615",
"2253869116693830990898981298309600641",
"153600327722077195794050578239849516622",
"181603947674291284795887596647366846704",
"278507769667169482615942510698193961718"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-52606-3c1db2a4",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0580f4403ad33f379eef865c2a6fe94de37febdf",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"326410570179984435160612002732301628883",
"180951862482277951258834813180567510672",
"78876271237640765917526038681563587135",
"111574388269106038217081314887509800109",
"326410570179984435160612002732301628883",
"180951862482277951258834813180567510672",
"78876271237640765917526038681563587135",
"111574388269106038217081314887509800109",
"221825287474066607392618835850066604324",
"79306805487343987080015729926715876615",
"2253869116693830990898981298309600641",
"153600327722077195794050578239849516622",
"181603947674291284795887596647366846704",
"278507769667169482615942510698193961718"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-52606-3d2dc37b",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@de4f5ed63b8a199704d8cdcbf810309d7eb4b36b",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_vec_store",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 570.0,
"function_hash": "100779242301702354044235582958661355169"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-41958061",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@de4f5ed63b8a199704d8cdcbf810309d7eb4b36b",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_fp_store",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 968.0,
"function_hash": "128755470252710014782794845025775377897"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-457b7b56",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8f9abaa6d7de0a70fc68acaedce290c1f96e2e59",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_vec_load",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 649.0,
"function_hash": "69566562344368989816495424792658030381"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-557a4bdb",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@de4f5ed63b8a199704d8cdcbf810309d7eb4b36b",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"326410570179984435160612002732301628883",
"180951862482277951258834813180567510672",
"78876271237640765917526038681563587135",
"111574388269106038217081314887509800109",
"326410570179984435160612002732301628883",
"180951862482277951258834813180567510672",
"78876271237640765917526038681563587135",
"111574388269106038217081314887509800109",
"221825287474066607392618835850066604324",
"79306805487343987080015729926715876615",
"2253869116693830990898981298309600641",
"153600327722077195794050578239849516622",
"181603947674291284795887596647366846704",
"278507769667169482615942510698193961718"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-52606-5b093a23",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@28b8ba8eebf26f66d9f2df4ba550b6b3b136082c",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_fp_load",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 1080.0,
"function_hash": "166490113653346571720087551836430599034"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-60bb04f0",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@848e1d7fd710900397e1d0e7584680c1c04e3afd",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_fp_load",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 1080.0,
"function_hash": "166490113653346571720087551836430599034"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-820ba03c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@42084a428a139f1a429f597d44621e3a18f3e414",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"326410570179984435160612002732301628883",
"180951862482277951258834813180567510672",
"78876271237640765917526038681563587135",
"111574388269106038217081314887509800109",
"326410570179984435160612002732301628883",
"180951862482277951258834813180567510672",
"78876271237640765917526038681563587135",
"111574388269106038217081314887509800109",
"221825287474066607392618835850066604324",
"79306805487343987080015729926715876615",
"2253869116693830990898981298309600641",
"153600327722077195794050578239849516622",
"181603947674291284795887596647366846704",
"278507769667169482615942510698193961718"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-52606-8cc5dcb1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@de4f5ed63b8a199704d8cdcbf810309d7eb4b36b",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_fp_load",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 1080.0,
"function_hash": "166490113653346571720087551836430599034"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-8fc177e2",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@beee482cc4c9a6b1dcffb2e190b4fd8782258678",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_fp_load",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 1080.0,
"function_hash": "166490113653346571720087551836430599034"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-97353e43",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8f9abaa6d7de0a70fc68acaedce290c1f96e2e59",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_fp_load",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 1080.0,
"function_hash": "166490113653346571720087551836430599034"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-9e88a85e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@42084a428a139f1a429f597d44621e3a18f3e414",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_fp_store",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 968.0,
"function_hash": "128755470252710014782794845025775377897"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-a0f3cef5",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@beee482cc4c9a6b1dcffb2e190b4fd8782258678",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"326410570179984435160612002732301628883",
"180951862482277951258834813180567510672",
"78876271237640765917526038681563587135",
"111574388269106038217081314887509800109",
"326410570179984435160612002732301628883",
"180951862482277951258834813180567510672",
"78876271237640765917526038681563587135",
"111574388269106038217081314887509800109",
"221825287474066607392618835850066604324",
"79306805487343987080015729926715876615",
"2253869116693830990898981298309600641",
"153600327722077195794050578239849516622",
"181603947674291284795887596647366846704",
"278507769667169482615942510698193961718"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-52606-a74145f6",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@28b8ba8eebf26f66d9f2df4ba550b6b3b136082c",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"326410570179984435160612002732301628883",
"180951862482277951258834813180567510672",
"78876271237640765917526038681563587135",
"111574388269106038217081314887509800109",
"326410570179984435160612002732301628883",
"180951862482277951258834813180567510672",
"78876271237640765917526038681563587135",
"111574388269106038217081314887509800109",
"221825287474066607392618835850066604324",
"79306805487343987080015729926715876615",
"2253869116693830990898981298309600641",
"153600327722077195794050578239849516622",
"181603947674291284795887596647366846704",
"278507769667169482615942510698193961718"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-52606-aad85b71",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@28b8ba8eebf26f66d9f2df4ba550b6b3b136082c",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_fp_store",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 968.0,
"function_hash": "128755470252710014782794845025775377897"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-af81649d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@beee482cc4c9a6b1dcffb2e190b4fd8782258678",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_fp_store",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 968.0,
"function_hash": "128755470252710014782794845025775377897"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-b2896378",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@abd26515d4b767ba48241eea77b28ce0872aef3e",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_fp_load",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 1080.0,
"function_hash": "166490113653346571720087551836430599034"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-b2b53164",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8f9abaa6d7de0a70fc68acaedce290c1f96e2e59",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_fp_store",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 968.0,
"function_hash": "128755470252710014782794845025775377897"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-b5416679",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@abd26515d4b767ba48241eea77b28ce0872aef3e",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_vec_store",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 570.0,
"function_hash": "100779242301702354044235582958661355169"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-b6b36706",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@28b8ba8eebf26f66d9f2df4ba550b6b3b136082c",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_vec_store",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 570.0,
"function_hash": "100779242301702354044235582958661355169"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-bc9cd419",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@abd26515d4b767ba48241eea77b28ce0872aef3e",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_fp_store",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 968.0,
"function_hash": "128755470252710014782794845025775377897"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-bd7cff48",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8f9abaa6d7de0a70fc68acaedce290c1f96e2e59",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_vec_store",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 609.0,
"function_hash": "299858348691906344033557740288467474587"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-bed96201",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@42084a428a139f1a429f597d44621e3a18f3e414",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_vec_store",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 570.0,
"function_hash": "100779242301702354044235582958661355169"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-cddfadba",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@abd26515d4b767ba48241eea77b28ce0872aef3e",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_vec_load",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 612.0,
"function_hash": "271125530644281068404452802113491209024"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-d023c3fb",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@42084a428a139f1a429f597d44621e3a18f3e414",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_fp_load",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 1080.0,
"function_hash": "166490113653346571720087551836430599034"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-d4602c8a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@de4f5ed63b8a199704d8cdcbf810309d7eb4b36b",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_vec_load",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 612.0,
"function_hash": "271125530644281068404452802113491209024"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-d49b9f5e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@28b8ba8eebf26f66d9f2df4ba550b6b3b136082c",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_vec_load",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 612.0,
"function_hash": "271125530644281068404452802113491209024"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-e498cb5e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@42084a428a139f1a429f597d44621e3a18f3e414",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_vec_load",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 612.0,
"function_hash": "271125530644281068404452802113491209024"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-e7ee7d9f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@848e1d7fd710900397e1d0e7584680c1c04e3afd",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"326410570179984435160612002732301628883",
"180951862482277951258834813180567510672",
"78876271237640765917526038681563587135",
"111574388269106038217081314887509800109",
"326410570179984435160612002732301628883",
"180951862482277951258834813180567510672",
"78876271237640765917526038681563587135",
"111574388269106038217081314887509800109",
"221825287474066607392618835850066604324",
"79306805487343987080015729926715876615",
"2253869116693830990898981298309600641",
"153600327722077195794050578239849516622",
"181603947674291284795887596647366846704",
"278507769667169482615942510698193961718"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-52606-ea82a71e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@848e1d7fd710900397e1d0e7584680c1c04e3afd",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_vec_store",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 570.0,
"function_hash": "100779242301702354044235582958661355169"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-ef6cf4e4",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@beee482cc4c9a6b1dcffb2e190b4fd8782258678",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_vec_load",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 612.0,
"function_hash": "271125530644281068404452802113491209024"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-f1185d8c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@848e1d7fd710900397e1d0e7584680c1c04e3afd",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_vec_load",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 612.0,
"function_hash": "271125530644281068404452802113491209024"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-f691926d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@848e1d7fd710900397e1d0e7584680c1c04e3afd",
"deprecated": false,
"signature_version": "v1",
"target": {
"function": "do_fp_store",
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"length": 968.0,
"function_hash": "128755470252710014782794845025775377897"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-52606-fab4f8a0",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@abd26515d4b767ba48241eea77b28ce0872aef3e",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "arch/powerpc/lib/sstep.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"326410570179984435160612002732301628883",
"180951862482277951258834813180567510672",
"78876271237640765917526038681563587135",
"111574388269106038217081314887509800109",
"326410570179984435160612002732301628883",
"180951862482277951258834813180567510672",
"78876271237640765917526038681563587135",
"111574388269106038217081314887509800109",
"221825287474066607392618835850066604324",
"79306805487343987080015729926715876615",
"2253869116693830990898981298309600641",
"153600327722077195794050578239849516622",
"181603947674291284795887596647366846704",
"278507769667169482615942510698193961718"
]
},
"signature_type": "Line"
}
]