CVE-2023-52619

pstore/ram: Fix crash when setting number of cpus to an odd number

State: Published
Severity: Not scored
Published: Mar 18, 2024
Updated: May 11, 2026
Reserved: Mar 6, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

pstore/ram: Fix crash when setting number of cpus to an odd number

When the number of cpu cores is adjusted to 7 or other odd numbers, the zone size will become an odd number. The address of the zone will become: addr of zone0 = BASE addr of zone1 = BASE + zone_size addr of zone2 = BASE + zone_size*2 ... The address of zone1/3/5/7 will be mapped to non-alignment va. Eventually crashes will occur when accessing these va.

So, use ALIGN_DOWN() to make sure the zone size is even to avoid this bug.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	de83209249d64bad993f25d3ea4bba57683e2e2e to before 8b69c30f4e8b69131d92096cb296dc1f217101e4Affected de83209249d64bad993f25d3ea4bba57683e2e2e to before e9f6ac50890104fdf8194f2865680689239d30fbAffected de83209249d64bad993f25d3ea4bba57683e2e2e to before a63e48cd835c34c38ef671d344cc029b1ea5bf10Affected de83209249d64bad993f25d3ea4bba57683e2e2e to before 2a37905d47bffec61e95d99f0c1cc5dc6377956cAffected de83209249d64bad993f25d3ea4bba57683e2e2e to before 75b0f71b26b3ad833c5c0670109c0af6e021e86aAffected de83209249d64bad993f25d3ea4bba57683e2e2e to before 0593cfd321df9001142a9d2c58d4144917dff7eeAffected de83209249d64bad993f25d3ea4bba57683e2e2e to before cd40e43f870cf21726b22487a95ed223790b3542Affected de83209249d64bad993f25d3ea4bba57683e2e2e to before d49270a04623ce3c0afddbf3e984cb245aa48e9cAffected
LinuxLinux	4.10Affected before 4.10Not affected 4.19.307 through 4.19.Not affected 5.4.269 through 5.4.Not affected 5.10.210 through 5.10.Not affected 5.15.149 through 5.15.Not affected 6.1.77 through 6.1.Not affected 6.6.16 through 6.6.Not affected 6.7.4 through 6.7.*Not affected 6.8 and laterNot affected

Product

Versions

LinuxLinux

de83209249d64bad993f25d3ea4bba57683e2e2e to before 8b69c30f4e8b69131d92096cb296dc1f217101e4Affected
de83209249d64bad993f25d3ea4bba57683e2e2e to before e9f6ac50890104fdf8194f2865680689239d30fbAffected
de83209249d64bad993f25d3ea4bba57683e2e2e to before a63e48cd835c34c38ef671d344cc029b1ea5bf10Affected
de83209249d64bad993f25d3ea4bba57683e2e2e to before 2a37905d47bffec61e95d99f0c1cc5dc6377956cAffected
de83209249d64bad993f25d3ea4bba57683e2e2e to before 75b0f71b26b3ad833c5c0670109c0af6e021e86aAffected
de83209249d64bad993f25d3ea4bba57683e2e2e to before 0593cfd321df9001142a9d2c58d4144917dff7eeAffected
de83209249d64bad993f25d3ea4bba57683e2e2e to before cd40e43f870cf21726b22487a95ed223790b3542Affected
de83209249d64bad993f25d3ea4bba57683e2e2e to before d49270a04623ce3c0afddbf3e984cb245aa48e9cAffected

LinuxLinux

4.10Affected
before 4.10Not affected
4.19.307 through 4.19.*Not affected
5.4.269 through 5.4.*Not affected
5.10.210 through 5.10.*Not affected
5.15.149 through 5.15.*Not affected
6.1.77 through 6.1.*Not affected
6.6.16 through 6.6.*Not affected
6.7.4 through 6.7.*Not affected
6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.