CVE-2023-52677

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-52677

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52677.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-52677

Downstream

BELL-CVE-2023-52677

DEBIAN-CVE-2023-52677

OESA-2024-1694

OESA-2024-1706

ROOT-OS-DEBIAN-11-CVE-2023-52677

UBUNTU-CVE-2023-52677

USN-6818-1

USN-6818-3

USN-6818-4

USN-6819-1

USN-6819-3

USN-6819-4

Related

Published

2024-05-17T14:24:42.051Z

Modified

2026-02-24T09:45:11.452415Z

Summary

riscv: Check if the code to patch lies in the exit section

Details

In the Linux kernel, the following vulnerability has been resolved:

riscv: Check if the code to patch lies in the exit section

Otherwise we fall through to vmalloctopage() which panics since the address does not lie in the vmalloc region.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52677.json",
    "cna_assigner": "Linux"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

043cb41a85de1c0e944da61ad7a264960e22c865

Fixed

938f70d14618ec72e10d6fcf8a546134136d7c13

Fixed

890cfe5337e0aaf03ece1429db04d23c88da72e7

Fixed

8db56df4a954b774bdc68917046a685a9fa2e4bc

Fixed

1d7a03052846f34d624d0ab41a879adf5e85c85f

Fixed

420370f3ae3d3b883813fd3051a38805160b2b9f

Affected versions

v5.*

v5.10

v5.10-rc1

v5.10-rc2

v5.10-rc3

v5.10-rc4

v5.10-rc5

v5.10-rc6

v5.10-rc7

v5.11

v5.11-rc1

v5.11-rc2

v5.11-rc3

v5.11-rc4

v5.11-rc5

v5.11-rc6

v5.11-rc7

v5.12

v5.12-rc1

v5.12-rc1-dontuse

v5.12-rc2

v5.12-rc3

v5.12-rc4

v5.12-rc5

v5.12-rc6

v5.12-rc7

v5.12-rc8

v5.13

v5.13-rc1

v5.13-rc2

v5.13-rc3

v5.13-rc4

v5.13-rc5

v5.13-rc6

v5.13-rc7

v5.14

v5.14-rc1

v5.14-rc2

v5.14-rc3

v5.14-rc4

v5.14-rc5

v5.14-rc6

v5.14-rc7

v5.15

v5.15-rc1

v5.15-rc2

v5.15-rc3

v5.15-rc4

v5.15-rc5

v5.15-rc6

v5.15-rc7

v5.15.1

v5.15.10

v5.15.100

v5.15.101

v5.15.102

v5.15.103

v5.15.104

v5.15.105

v5.15.106

v5.15.107

v5.15.108

v5.15.109

v5.15.11

v5.15.110

v5.15.111

v5.15.112

v5.15.113

v5.15.114

v5.15.115

v5.15.116

v5.15.117

v5.15.118

v5.15.119

v5.15.12

v5.15.120

v5.15.121

v5.15.122

v5.15.123

v5.15.124

v5.15.125

v5.15.126

v5.15.127

v5.15.128

v5.15.129

v5.15.13

v5.15.130

v5.15.131

v5.15.132

v5.15.133

v5.15.134

v5.15.135

v5.15.136

v5.15.137

v5.15.138

v5.15.139

v5.15.14

v5.15.140

v5.15.141

v5.15.142

v5.15.143

v5.15.144

v5.15.145

v5.15.146

v5.15.147

v5.15.15

v5.15.16

v5.15.17

v5.15.18

v5.15.19

v5.15.2

v5.15.20

v5.15.21

v5.15.22

v5.15.23

v5.15.24

v5.15.25

v5.15.26

v5.15.27

v5.15.28

v5.15.29

v5.15.3

v5.15.30

v5.15.31

v5.15.32

v5.15.33

v5.15.34

v5.15.35

v5.15.36

v5.15.37

v5.15.38

v5.15.39

v5.15.4

v5.15.40

v5.15.41

v5.15.42

v5.15.43

v5.15.44

v5.15.45

v5.15.46

v5.15.47

v5.15.48

v5.15.49

v5.15.5

v5.15.50

v5.15.51

v5.15.52

v5.15.53

v5.15.54

v5.15.55

v5.15.56

v5.15.57

v5.15.58

v5.15.59

v5.15.6

v5.15.60

v5.15.61

v5.15.62

v5.15.63

v5.15.64

v5.15.65

v5.15.66

v5.15.67

v5.15.68

v5.15.69

v5.15.7

v5.15.70

v5.15.71

v5.15.72

v5.15.73

v5.15.74

v5.15.75

v5.15.76

v5.15.77

v5.15.78

v5.15.79

v5.15.8

v5.15.80

v5.15.81

v5.15.82

v5.15.83

v5.15.84

v5.15.85

v5.15.86

v5.15.87

v5.15.88

v5.15.89

v5.15.9

v5.15.90

v5.15.91

v5.15.92

v5.15.93

v5.15.94

v5.15.95

v5.15.96

v5.15.97

v5.15.98

v5.15.99

v5.16

v5.16-rc1

v5.16-rc2

v5.16-rc3

v5.16-rc4

v5.16-rc5

v5.16-rc6

v5.16-rc7

v5.16-rc8

v5.17

v5.17-rc1

v5.17-rc2

v5.17-rc3

v5.17-rc4

v5.17-rc5

v5.17-rc6

v5.17-rc7

v5.17-rc8

v5.18

v5.18-rc1

v5.18-rc2

v5.18-rc3

v5.18-rc4

v5.18-rc5

v5.18-rc6

v5.18-rc7

v5.19

v5.19-rc1

v5.19-rc2

v5.19-rc3

v5.19-rc4

v5.19-rc5

v5.19-rc6

v5.19-rc7

v5.19-rc8

v5.6

v5.6-rc5

v5.6-rc6

v5.6-rc7

v5.7

v5.7-rc1

v5.7-rc2

v5.7-rc3

v5.7-rc4

v5.7-rc5

v5.7-rc6

v5.7-rc7

v5.8

v5.8-rc1

v5.8-rc2

v5.8-rc3

v5.8-rc4

v5.8-rc5

v5.8-rc6

v5.8-rc7

v5.9

v5.9-rc1

v5.9-rc2

v5.9-rc3

v5.9-rc4

v5.9-rc5

v5.9-rc6

v5.9-rc7

v5.9-rc8

v6.*

v6.0

v6.0-rc1

v6.0-rc2

v6.0-rc3

v6.0-rc4

v6.0-rc5

v6.0-rc6

v6.0-rc7

v6.1

v6.1-rc1

v6.1-rc2

v6.1-rc3

v6.1-rc4

v6.1-rc5

v6.1-rc6

v6.1-rc7

v6.1-rc8

v6.1.1

v6.1.10

v6.1.11

v6.1.12

v6.1.13

v6.1.14

v6.1.15

v6.1.16

v6.1.17

v6.1.18

v6.1.19

v6.1.2

v6.1.20

v6.1.21

v6.1.22

v6.1.23

v6.1.24

v6.1.25

v6.1.26

v6.1.27

v6.1.28

v6.1.29

v6.1.3

v6.1.30

v6.1.31

v6.1.32

v6.1.33

v6.1.34

v6.1.35

v6.1.36

v6.1.37

v6.1.38

v6.1.39

v6.1.4

v6.1.40

v6.1.41

v6.1.42

v6.1.43

v6.1.44

v6.1.45

v6.1.46

v6.1.47

v6.1.48

v6.1.49

v6.1.5

v6.1.50

v6.1.51

v6.1.52

v6.1.53

v6.1.54

v6.1.55

v6.1.56

v6.1.57

v6.1.58

v6.1.59

v6.1.6

v6.1.60

v6.1.61

v6.1.62

v6.1.63

v6.1.64

v6.1.65

v6.1.66

v6.1.67

v6.1.68

v6.1.69

v6.1.7

v6.1.70

v6.1.71

v6.1.72

v6.1.73

v6.1.74

v6.1.8

v6.1.9

v6.2

v6.2-rc1

v6.2-rc2

v6.2-rc3

v6.2-rc4

v6.2-rc5

v6.2-rc6

v6.2-rc7

v6.2-rc8

v6.3

v6.3-rc1

v6.3-rc2

v6.3-rc3

v6.3-rc4

v6.3-rc5

v6.3-rc6

v6.3-rc7

v6.4

v6.4-rc1

v6.4-rc2

v6.4-rc3

v6.4-rc4

v6.4-rc5

v6.4-rc6

v6.4-rc7

v6.5

v6.5-rc1

v6.5-rc2

v6.5-rc3

v6.5-rc4

v6.5-rc5

v6.5-rc6

v6.5-rc7

v6.6

v6.6-rc1

v6.6-rc2

v6.6-rc3

v6.6-rc4

v6.6-rc5

v6.6-rc6

v6.6-rc7

v6.6.1

v6.6.10

v6.6.11

v6.6.12

v6.6.13

v6.6.2

v6.6.3

v6.6.4

v6.6.5

v6.6.6

v6.6.7

v6.6.8

v6.6.9

v6.7

v6.7-rc1

v6.7-rc2

v6.7-rc3

v6.7-rc4

v6.7-rc5

v6.7-rc6

v6.7-rc7

v6.7-rc8

v6.7.1

Database specific

vanir_signatures

[
    {
        "id": "CVE-2023-52677-32b1b473",
        "signature_version": "v1",
        "digest": {
            "function_hash": "268638750313671907224043781753586041413",
            "length": 382.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1d7a03052846f34d624d0ab41a879adf5e85c85f",
        "signature_type": "Function",
        "target": {
            "file": "arch/riscv/kernel/patch.c",
            "function": "patch_map"
        }
    },
    {
        "id": "CVE-2023-52677-3fbd74f5",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "208479875197133415079922350855910724711",
                "242241818114327939993039181332102510491",
                "165837364818440174641255362215629101062",
                "20988508475309090963142548273158316446"
            ]
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@938f70d14618ec72e10d6fcf8a546134136d7c13",
        "signature_type": "Line",
        "target": {
            "file": "arch/riscv/include/asm/sections.h"
        }
    },
    {
        "id": "CVE-2023-52677-47a3fdd7",
        "signature_version": "v1",
        "digest": {
            "function_hash": "268638750313671907224043781753586041413",
            "length": 382.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@938f70d14618ec72e10d6fcf8a546134136d7c13",
        "signature_type": "Function",
        "target": {
            "file": "arch/riscv/kernel/patch.c",
            "function": "patch_map"
        }
    },
    {
        "id": "CVE-2023-52677-7af292ee",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "285393940612668181617179722156616221133",
                "97387713313868400375262546092315218140",
                "126297514009497567614726258797142456742",
                "216217846959718997937628433286160133363",
                "234308516842492875558171503466695037030",
                "115171549920852804032997276322317616244",
                "111456482155995087401293002555040187995",
                "50195398814195091403874776976159408906",
                "5760910809092523827826783175836689916",
                "76624573594447092053869187067122333890",
                "44076664201263026934488338987746997328",
                "117083950257780080901124202948470374409"
            ]
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@420370f3ae3d3b883813fd3051a38805160b2b9f",
        "signature_type": "Line",
        "target": {
            "file": "arch/riscv/kernel/patch.c"
        }
    },
    {
        "id": "CVE-2023-52677-83a74be6",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "208479875197133415079922350855910724711",
                "242241818114327939993039181332102510491",
                "165837364818440174641255362215629101062",
                "20988508475309090963142548273158316446"
            ]
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@890cfe5337e0aaf03ece1429db04d23c88da72e7",
        "signature_type": "Line",
        "target": {
            "file": "arch/riscv/include/asm/sections.h"
        }
    },
    {
        "id": "CVE-2023-52677-8bf9d647",
        "signature_version": "v1",
        "digest": {
            "function_hash": "268638750313671907224043781753586041413",
            "length": 382.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@890cfe5337e0aaf03ece1429db04d23c88da72e7",
        "signature_type": "Function",
        "target": {
            "file": "arch/riscv/kernel/patch.c",
            "function": "patch_map"
        }
    },
    {
        "id": "CVE-2023-52677-b230161d",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "208479875197133415079922350855910724711",
                "242241818114327939993039181332102510491",
                "165837364818440174641255362215629101062",
                "20988508475309090963142548273158316446"
            ]
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1d7a03052846f34d624d0ab41a879adf5e85c85f",
        "signature_type": "Line",
        "target": {
            "file": "arch/riscv/include/asm/sections.h"
        }
    },
    {
        "id": "CVE-2023-52677-b357b241",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "208479875197133415079922350855910724711",
                "242241818114327939993039181332102510491",
                "165837364818440174641255362215629101062",
                "20988508475309090963142548273158316446"
            ]
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8db56df4a954b774bdc68917046a685a9fa2e4bc",
        "signature_type": "Line",
        "target": {
            "file": "arch/riscv/include/asm/sections.h"
        }
    },
    {
        "id": "CVE-2023-52677-d0c9b9bf",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "208479875197133415079922350855910724711",
                "242241818114327939993039181332102510491",
                "165837364818440174641255362215629101062",
                "20988508475309090963142548273158316446"
            ]
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@420370f3ae3d3b883813fd3051a38805160b2b9f",
        "signature_type": "Line",
        "target": {
            "file": "arch/riscv/include/asm/sections.h"
        }
    },
    {
        "id": "CVE-2023-52677-d0e365c0",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "285393940612668181617179722156616221133",
                "97387713313868400375262546092315218140",
                "126297514009497567614726258797142456742",
                "216217846959718997937628433286160133363",
                "234308516842492875558171503466695037030",
                "115171549920852804032997276322317616244",
                "111456482155995087401293002555040187995",
                "50195398814195091403874776976159408906",
                "5760910809092523827826783175836689916",
                "76624573594447092053869187067122333890",
                "44076664201263026934488338987746997328",
                "117083950257780080901124202948470374409"
            ]
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1d7a03052846f34d624d0ab41a879adf5e85c85f",
        "signature_type": "Line",
        "target": {
            "file": "arch/riscv/kernel/patch.c"
        }
    },
    {
        "id": "CVE-2023-52677-dd76ad76",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "285393940612668181617179722156616221133",
                "97387713313868400375262546092315218140",
                "126297514009497567614726258797142456742",
                "216217846959718997937628433286160133363",
                "234308516842492875558171503466695037030",
                "115171549920852804032997276322317616244",
                "111456482155995087401293002555040187995",
                "50195398814195091403874776976159408906",
                "5760910809092523827826783175836689916",
                "76624573594447092053869187067122333890",
                "44076664201263026934488338987746997328",
                "117083950257780080901124202948470374409"
            ]
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8db56df4a954b774bdc68917046a685a9fa2e4bc",
        "signature_type": "Line",
        "target": {
            "file": "arch/riscv/kernel/patch.c"
        }
    },
    {
        "id": "CVE-2023-52677-e4ee2f32",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "285393940612668181617179722156616221133",
                "97387713313868400375262546092315218140",
                "126297514009497567614726258797142456742",
                "5317996641992254433506447069711444009",
                "234308516842492875558171503466695037030",
                "115171549920852804032997276322317616244",
                "111456482155995087401293002555040187995",
                "50195398814195091403874776976159408906",
                "5760910809092523827826783175836689916",
                "76624573594447092053869187067122333890",
                "44076664201263026934488338987746997328",
                "117083950257780080901124202948470374409"
            ]
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@890cfe5337e0aaf03ece1429db04d23c88da72e7",
        "signature_type": "Line",
        "target": {
            "file": "arch/riscv/kernel/patch.c"
        }
    },
    {
        "id": "CVE-2023-52677-e60b1d97",
        "signature_version": "v1",
        "digest": {
            "function_hash": "268638750313671907224043781753586041413",
            "length": 382.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8db56df4a954b774bdc68917046a685a9fa2e4bc",
        "signature_type": "Function",
        "target": {
            "file": "arch/riscv/kernel/patch.c",
            "function": "patch_map"
        }
    },
    {
        "id": "CVE-2023-52677-f18beadc",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "285393940612668181617179722156616221133",
                "97387713313868400375262546092315218140",
                "126297514009497567614726258797142456742",
                "5317996641992254433506447069711444009",
                "234308516842492875558171503466695037030",
                "115171549920852804032997276322317616244",
                "111456482155995087401293002555040187995",
                "50195398814195091403874776976159408906",
                "5760910809092523827826783175836689916",
                "76624573594447092053869187067122333890",
                "44076664201263026934488338987746997328",
                "117083950257780080901124202948470374409"
            ]
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@938f70d14618ec72e10d6fcf8a546134136d7c13",
        "signature_type": "Line",
        "target": {
            "file": "arch/riscv/kernel/patch.c"
        }
    },
    {
        "id": "CVE-2023-52677-fa3bbea5",
        "signature_version": "v1",
        "digest": {
            "function_hash": "268638750313671907224043781753586041413",
            "length": 382.0
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@420370f3ae3d3b883813fd3051a38805160b2b9f",
        "signature_type": "Function",
        "target": {
            "file": "arch/riscv/kernel/patch.c",
            "function": "patch_map"
        }
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52677.json"

Git / github.com/gregkh/linux