Riskcovery

CVE-2023-52576

x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()

State
Published
Severity
5.5 Medium
Published
Mar 2, 2024
Updated
May 11, 2026
Reserved
Mar 2, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()

The code calling ima_free_kexec_buffer() runs long after the memblock allocator has already been torn down, potentially resulting in a use after free in memblock_isolate_range().

With KASAN or KFENCE, this use after free will result in a BUG from the idle task, and a subsequent kernel panic.

Switch ima_free_kexec_buffer() over to memblock_free_late() to avoid that bug.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • fee3ff99bc67604fba77f19da0106f3ec52b1956 to before eef16bfdb212da60f5144689f2967fb25b051a2bAffected
  • fee3ff99bc67604fba77f19da0106f3ec52b1956 to before d2dfbc0e3b7a04c2d941421a958dc31c897fb204Affected
  • fee3ff99bc67604fba77f19da0106f3ec52b1956 to before 34cf99c250d5cd2530b93a57b0de31d3aaf8685bAffected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 6.1.56 through 6.1.*Not affected
  • 6.5.6 through 6.5.*Not affected
  • 6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.