CVE-2023-52615

hwrng: core - Fix page fault dead lock on mmap-ed hwrng

State: Published
Severity: Not scored
Published: Mar 18, 2024
Updated: May 11, 2026
Reserved: Mar 6, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

hwrng: core - Fix page fault dead lock on mmap-ed hwrng

There is a dead-lock in the hwrng device read path. This triggers when the user reads from /dev/hwrng into memory also mmap-ed from /dev/hwrng. The resulting page fault triggers a recursive read which then dead-locks.

Fix this by using a stack buffer when calling copy_to_user.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9996508b3353063f2d6c48c1a28a84543d72d70b to before eafd83b92f6c044007a3591cbd476bcf90455990Affected 9996508b3353063f2d6c48c1a28a84543d72d70b to before 5030d4c798863ccb266563201b341a099e8cdd48Affected 9996508b3353063f2d6c48c1a28a84543d72d70b to before c6a8111aacbfe7a8a70f46cc0de8eed00561693cAffected 9996508b3353063f2d6c48c1a28a84543d72d70b to before 26cc6d7006f922df6cc4389248032d955750b2a0Affected 9996508b3353063f2d6c48c1a28a84543d72d70b to before aa8aa16ed9adf1df05bb339d588cf485a011839eAffected 9996508b3353063f2d6c48c1a28a84543d72d70b to before ecabe8cd456d3bf81e92c53b074732f3140f170dAffected 9996508b3353063f2d6c48c1a28a84543d72d70b to before 6822a14271786150e178869f1495cc03e74c5029Affected 9996508b3353063f2d6c48c1a28a84543d72d70b to before 78aafb3884f6bc6636efcc1760c891c8500b9922Affected
LinuxLinux	2.6.33Affected before 2.6.33Not affected 4.19.307 through 4.19.Not affected 5.4.269 through 5.4.Not affected 5.10.210 through 5.10.Not affected 5.15.149 through 5.15.Not affected 6.1.76 through 6.1.Not affected 6.6.15 through 6.6.Not affected 6.7.3 through 6.7.*Not affected 6.8 and laterNot affected

Product

Versions

LinuxLinux

9996508b3353063f2d6c48c1a28a84543d72d70b to before eafd83b92f6c044007a3591cbd476bcf90455990Affected
9996508b3353063f2d6c48c1a28a84543d72d70b to before 5030d4c798863ccb266563201b341a099e8cdd48Affected
9996508b3353063f2d6c48c1a28a84543d72d70b to before c6a8111aacbfe7a8a70f46cc0de8eed00561693cAffected
9996508b3353063f2d6c48c1a28a84543d72d70b to before 26cc6d7006f922df6cc4389248032d955750b2a0Affected
9996508b3353063f2d6c48c1a28a84543d72d70b to before aa8aa16ed9adf1df05bb339d588cf485a011839eAffected
9996508b3353063f2d6c48c1a28a84543d72d70b to before ecabe8cd456d3bf81e92c53b074732f3140f170dAffected
9996508b3353063f2d6c48c1a28a84543d72d70b to before 6822a14271786150e178869f1495cc03e74c5029Affected
9996508b3353063f2d6c48c1a28a84543d72d70b to before 78aafb3884f6bc6636efcc1760c891c8500b9922Affected

LinuxLinux

2.6.33Affected
before 2.6.33Not affected
4.19.307 through 4.19.*Not affected
5.4.269 through 5.4.*Not affected
5.10.210 through 5.10.*Not affected
5.15.149 through 5.15.*Not affected
6.1.76 through 6.1.*Not affected
6.6.15 through 6.6.*Not affected
6.7.3 through 6.7.*Not affected
6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.