In the Linux kernel, the following vulnerability has been resolved:
ipv4: prevent potential spectre v1 gadget in ipmetricsconvert()
if (!type) continue; if (type > RTAX_MAX) return -EINVAL; ... metrics[type - 1] = val;
@type being used as an array index, we need to prevent cpu speculation or risk leaking kernel memory content.
[
{
"target": {
"function": "ip_metrics_convert",
"file": "net/ipv4/metrics.c"
},
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "111987963850955824523955041476664357837",
"length": 1240.0
},
"deprecated": false,
"id": "CVE-2023-52997-0e16ed38",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6850fe301d015a7d2012d1de8caf43dafb7cc2f6"
},
{
"target": {
"file": "net/ipv4/metrics.c"
},
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"76707369197856269064682419699883459921",
"60136005043047856231375779418451825494",
"225511424165022500798724024269233517980",
"92387928123343719314018105721572761846"
]
},
"deprecated": false,
"id": "CVE-2023-52997-29147aa3",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6850fe301d015a7d2012d1de8caf43dafb7cc2f6"
},
{
"target": {
"function": "ip_metrics_convert",
"file": "net/ipv4/metrics.c"
},
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "158642662723482690072562793433388542378",
"length": 1214.0
},
"deprecated": false,
"id": "CVE-2023-52997-2e07212a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1d1d63b612801b3f0a39b7d4467cad0abd60e5c8"
},
{
"target": {
"file": "net/ipv4/metrics.c"
},
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"76707369197856269064682419699883459921",
"60136005043047856231375779418451825494",
"225511424165022500798724024269233517980",
"64073590025692451995529564538762171892"
]
},
"deprecated": false,
"id": "CVE-2023-52997-32513f06",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34c6142f0df9cd75cba5a7aa9df0960d2854b415"
},
{
"target": {
"file": "net/ipv4/metrics.c"
},
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"76707369197856269064682419699883459921",
"60136005043047856231375779418451825494",
"225511424165022500798724024269233517980",
"92387928123343719314018105721572761846"
]
},
"deprecated": false,
"id": "CVE-2023-52997-41f9cc08",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1d1d63b612801b3f0a39b7d4467cad0abd60e5c8"
},
{
"target": {
"function": "ip_metrics_convert",
"file": "net/ipv4/metrics.c"
},
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "111987963850955824523955041476664357837",
"length": 1240.0
},
"deprecated": false,
"id": "CVE-2023-52997-48becca2",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@746db9ec1e672eee13965625ddac0d97e16fa20c"
},
{
"target": {
"function": "ip_metrics_convert",
"file": "net/ipv4/metrics.c"
},
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "111987963850955824523955041476664357837",
"length": 1240.0
},
"deprecated": false,
"id": "CVE-2023-52997-627372e5",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d50e7348b44f1e046121ff5be01b7fb6978a1149"
},
{
"target": {
"file": "net/ipv4/metrics.c"
},
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"76707369197856269064682419699883459921",
"60136005043047856231375779418451825494",
"225511424165022500798724024269233517980",
"92387928123343719314018105721572761846"
]
},
"deprecated": false,
"id": "CVE-2023-52997-926f76d6",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d50e7348b44f1e046121ff5be01b7fb6978a1149"
},
{
"target": {
"file": "net/ipv4/metrics.c"
},
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"76707369197856269064682419699883459921",
"60136005043047856231375779418451825494",
"225511424165022500798724024269233517980",
"64073590025692451995529564538762171892"
]
},
"deprecated": false,
"id": "CVE-2023-52997-a750787c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@746db9ec1e672eee13965625ddac0d97e16fa20c"
},
{
"target": {
"function": "ip_metrics_convert",
"file": "net/ipv4/metrics.c"
},
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "111987963850955824523955041476664357837",
"length": 1240.0
},
"deprecated": false,
"id": "CVE-2023-52997-b8b1a943",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@34c6142f0df9cd75cba5a7aa9df0960d2854b415"
},
{
"target": {
"function": "ip_metrics_convert",
"file": "net/ipv4/metrics.c"
},
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "279768461473053481458251223965341005772",
"length": 959.0
},
"deprecated": false,
"id": "CVE-2023-52997-bf52457f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ef050cf5fb70d995a0d03244e25179b7c66a924a"
},
{
"target": {
"file": "net/ipv4/metrics.c"
},
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"76707369197856269064682419699883459921",
"167816823935692556998066907429287846333",
"332607018995025060460329793292446771970",
"323576730535437818053387631353210396233"
]
},
"deprecated": false,
"id": "CVE-2023-52997-d87a8ecf",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ef050cf5fb70d995a0d03244e25179b7c66a924a"
}
]