Riskcovery

CVE-2023-52677

riscv: Check if the code to patch lies in the exit section

State
Published
Severity
Not scored
Published
May 17, 2024
Updated
May 11, 2026
Reserved
Mar 7, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

riscv: Check if the code to patch lies in the exit section

Otherwise we fall through to vmalloc_to_page() which panics since the address does not lie in the vmalloc region.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 043cb41a85de1c0e944da61ad7a264960e22c865 to before 938f70d14618ec72e10d6fcf8a546134136d7c13Affected
  • 043cb41a85de1c0e944da61ad7a264960e22c865 to before 890cfe5337e0aaf03ece1429db04d23c88da72e7Affected
  • 043cb41a85de1c0e944da61ad7a264960e22c865 to before 8db56df4a954b774bdc68917046a685a9fa2e4bcAffected
  • 043cb41a85de1c0e944da61ad7a264960e22c865 to before 1d7a03052846f34d624d0ab41a879adf5e85c85fAffected
  • 043cb41a85de1c0e944da61ad7a264960e22c865 to before 420370f3ae3d3b883813fd3051a38805160b2b9fAffected
LinuxLinux
  • 5.7Affected
  • before 5.7Not affected
  • 5.15.148 through 5.15.*Not affected
  • 6.1.75 through 6.1.*Not affected
  • 6.6.14 through 6.6.*Not affected
  • 6.7.2 through 6.7.*Not affected
  • 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.