CVE-2023-52633

um: time-travel: fix time corruption

State: Published
Severity: Not scored
Published: Apr 2, 2024
Updated: May 11, 2026
Reserved: Mar 6, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

um: time-travel: fix time corruption

In 'basic' time-travel mode (without =inf-cpu or =ext), we still get timer interrupts. These can happen at arbitrary points in time, i.e. while in timer_read(), which pushes time forward just a little bit. Then, if we happen to get the interrupt after calculating the new time to push to, but before actually finishing that, the interrupt will set the time to a value that's incompatible with the forward, and we'll crash because time goes backwards when we do the forwarding.

Fix this by reading the time_travel_time, calculating the adjustment, and doing the adjustment all with interrupts disabled.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	065038706f77a56754e8f0c2556dab7e22dfe577 to before 0c7478a2da3f5fe106b4658338873d50c86ac7abAffected 065038706f77a56754e8f0c2556dab7e22dfe577 to before 4f7dad73df4cdb2b7042103d3922745d040ad025Affected 065038706f77a56754e8f0c2556dab7e22dfe577 to before de3e9d8e8d1ae0a4d301109d1ec140796901306cAffected 065038706f77a56754e8f0c2556dab7e22dfe577 to before b427f55e9d4185f6f17cc1e3296eb8d0c4425283Affected 065038706f77a56754e8f0c2556dab7e22dfe577 to before abe4eaa8618bb36c2b33e9cdde0499296a23448cAffected
LinuxLinux	5.3Affected before 5.3Not affected 5.15.149 through 5.15.Not affected 6.1.77 through 6.1.Not affected 6.6.16 through 6.6.Not affected 6.7.4 through 6.7.Not affected 6.8 and laterNot affected

Product

Versions

LinuxLinux

065038706f77a56754e8f0c2556dab7e22dfe577 to before 0c7478a2da3f5fe106b4658338873d50c86ac7abAffected
065038706f77a56754e8f0c2556dab7e22dfe577 to before 4f7dad73df4cdb2b7042103d3922745d040ad025Affected
065038706f77a56754e8f0c2556dab7e22dfe577 to before de3e9d8e8d1ae0a4d301109d1ec140796901306cAffected
065038706f77a56754e8f0c2556dab7e22dfe577 to before b427f55e9d4185f6f17cc1e3296eb8d0c4425283Affected
065038706f77a56754e8f0c2556dab7e22dfe577 to before abe4eaa8618bb36c2b33e9cdde0499296a23448cAffected

LinuxLinux

5.3Affected
before 5.3Not affected
5.15.149 through 5.15.*Not affected
6.1.77 through 6.1.*Not affected
6.6.16 through 6.6.*Not affected
6.7.4 through 6.7.*Not affected
6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.