U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

CVE-2023-52619 Detail

Description

In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Fix crash when setting number of cpus to an odd number When the number of cpu cores is adjusted to 7 or other odd numbers, the zone size will become an odd number. The address of the zone will become: addr of zone0 = BASE addr of zone1 = BASE + zone_size addr of zone2 = BASE + zone_size*2 ... The address of zone1/3/5/7 will be mapped to non-alignment va. Eventually crashes will occur when accessing these va. So, use ALIGN_DOWN() to make sure the zone size is even to avoid this bug.


Metrics

NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.
CVSS 3.x Severity and Vector Strings:

NIST CVSS score
NIST: NVD
Base Score:  5.5 MEDIUM
Vector:  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Hyperlink Resource
https://git.kernel.org/stable/c/0593cfd321df9001142a9d2c58d4144917dff7ee Mailing List  Patch 
https://git.kernel.org/stable/c/0593cfd321df9001142a9d2c58d4144917dff7ee Mailing List  Patch 
https://git.kernel.org/stable/c/2a37905d47bffec61e95d99f0c1cc5dc6377956c Mailing List  Patch 
https://git.kernel.org/stable/c/2a37905d47bffec61e95d99f0c1cc5dc6377956c Mailing List  Patch 
https://git.kernel.org/stable/c/75b0f71b26b3ad833c5c0670109c0af6e021e86a Mailing List  Patch 
https://git.kernel.org/stable/c/75b0f71b26b3ad833c5c0670109c0af6e021e86a Mailing List  Patch 
https://git.kernel.org/stable/c/8b69c30f4e8b69131d92096cb296dc1f217101e4 Mailing List  Patch 
https://git.kernel.org/stable/c/8b69c30f4e8b69131d92096cb296dc1f217101e4 Mailing List  Patch 
https://git.kernel.org/stable/c/a63e48cd835c34c38ef671d344cc029b1ea5bf10 Mailing List  Patch 
https://git.kernel.org/stable/c/a63e48cd835c34c38ef671d344cc029b1ea5bf10 Mailing List  Patch 
https://git.kernel.org/stable/c/cd40e43f870cf21726b22487a95ed223790b3542 Mailing List  Patch 
https://git.kernel.org/stable/c/cd40e43f870cf21726b22487a95ed223790b3542 Mailing List  Patch 
https://git.kernel.org/stable/c/d49270a04623ce3c0afddbf3e984cb245aa48e9c Mailing List  Patch 
https://git.kernel.org/stable/c/d49270a04623ce3c0afddbf3e984cb245aa48e9c Mailing List  Patch 
https://git.kernel.org/stable/c/e9f6ac50890104fdf8194f2865680689239d30fb Mailing List  Patch 
https://git.kernel.org/stable/c/e9f6ac50890104fdf8194f2865680689239d30fb Mailing List  Patch 
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html Mailing List 
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html Mailing List 

Weakness Enumeration

CWE-ID CWE Name Source
NVD-CWE-noinfo Insufficient Information cwe source acceptance level NIST  

Known Affected Software Configurations Switch to CPE 2.2

Configuration 1 ( hide )
 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
   Show Matching CPE(s)
Up to (excluding)
4.19.307
 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
   Show Matching CPE(s)
From (including)
4.20
Up to (excluding)
5.4.269
 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
   Show Matching CPE(s)
From (including)
5.5
Up to (excluding)
5.10.210
 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
   Show Matching CPE(s)
From (including)
5.11
Up to (excluding)
5.15.149
 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
   Show Matching CPE(s)
From (including)
5.16
Up to (excluding)
6.1.77
 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
   Show Matching CPE(s)
From (including)
6.2
Up to (excluding)
6.6.16
 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
   Show Matching CPE(s)
From (including)
6.7
Up to (excluding)
6.7.4

Configuration 2 ( hide )
 cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
   Show Matching CPE(s)

Denotes Vulnerable Software
Are we missing a CPE here? Please let us know.

Change History

8 change records found show changes

Quick Info

CVE Dictionary Entry:
CVE-2023-52619
NVD Published Date:
03/18/2024
NVD Last Modified:
03/10/2025
Source:
kernel.org