Kernel Panic Vulnerability in Linux Package: LoongArch pmd_leaf Definition Issue
Summary
CVE-2023-53361: In the Linux kernel, the following vulnerability has been resolved: LoongArch: mm: Add p?d_leaf() definitions When I do LTP test, LTP test case ksm06 caused panic at break_ksm_pmd_entry -> pmd_leaf (Huge page table but F... Affects linux versions < 6.1.55-1. Fixed in 6.1.55-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware management and system resources. It is known for its stability, performance, and support for a wide range of hardware architectures. The vulnerability in question affects the LoongArch architecture, specifically related to the handling of page table entries, which can lead to system instability and crashes.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified that affects the LoongArch architecture. The issue arises from the lack of a defined pmd_leaf() function, which is crucial for managing huge page tables. During testing with the Linux Test Project (LTP), a specific test case (ksm06) triggered a panic due to the undefined pmd_leaf() function, leading to a system crash. This vulnerability can result in significant system instability and may affect applications relying on the kernel's memory management features.
How To Fix
Minimum fixed version
6.1.55-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the available patches as soon as they are released.
Conclusion
The vulnerability CVE-2023-53361 in the Linux kernel poses a significant risk to systems using the LoongArch architecture. It is crucial to update to the patched versions to ensure system stability and security. Regular monitoring and prompt updates are essential to protect against such vulnerabilities.
See every vulnerability recorded for linux →
FAQ
CVE-2023-53361 is a vulnerability in the Linux kernel affecting the LoongArch architecture, caused by the absence of a pmd_leaf() function, leading to potential system crashes.
This vulnerability can cause kernel panics, resulting in system instability and crashes, particularly during memory management operations.
If you are using the Linux kernel on a system with the LoongArch architecture and have not updated to the patched versions, your system may be at risk.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
While there are no specific workarounds, it is advisable to monitor your system closely and apply the updates as soon as possible to mitigate the risk.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
