Kernel Vulnerability in Linux Package: JALR Instruction Simulation Crash
Summary
CVE-2023-52995: In the Linux kernel, the following vulnerability has been resolved: riscv/kprobe: Fix instruction simulation of JALR Set kprobe at 'jalr 1140(ra)' of vfs_write results in the following crash: [ 32.092235] Unable to handl... Affects linux versions < 6.1.11-1. Fixed in 6.1.11-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, managing system resources and hardware communication. It is crucial for system stability and performance. This vulnerability affects the RISC-V architecture, specifically in the kprobe subsystem, which allows for dynamic instrumentation of the kernel. The issue arises when setting a kprobe at a specific instruction, leading to a crash due to improper handling of user memory access.
Vulnerability Detail
The vulnerability, identified as CVE-2023-52995, originates from a flaw in the instruction simulation of the JALR (Jump And Link Register) instruction within the RISC-V architecture of the Linux kernel. When a kprobe is set at the instruction 'jalr 1140(ra)', it can cause the kernel to crash, resulting in an inability to handle access to user memory without appropriate uaccess routines. This can lead to system instability and potential data loss, impacting applications relying on kernel functionality.
How To Fix
Minimum fixed version
6.1.11-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workaround is provided for this vulnerability. It is recommended to apply the patch as soon as it becomes available to mitigate risks.
Conclusion
CVE-2023-52995 is a significant vulnerability in the Linux kernel affecting the RISC-V architecture, leading to potential system crashes. Users are urged to update their packages to the patched version to ensure system stability and security. Monitoring tools like Vulert can assist in identifying vulnerabilities in applications.
See every vulnerability recorded for linux →
FAQ
CVE-2023-52995 is a vulnerability in the Linux kernel affecting the RISC-V architecture, leading to crashes when certain instructions are probed.
This vulnerability can cause system crashes and instability, particularly for applications that rely on the kernel's functionality.
Yes, a patch is available in version 6.1.11-1 for Debian 12 and 13. Users should update their Linux package to this version.
While no specific workaround is provided, it is advisable to monitor the situation and apply the patch as soon as possible to mitigate risks.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. You can check your application using the Vulert playground at Vulert Scanner without needing to sign up.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
