Critical Vulnerability in Linux Kernel: Reboot Exception Causes System Hangs
Summary
DEBIAN-CVE-2023-52657: In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd/pm: resolve reboot exception for si oland" This reverts commit e490d60a2f76bff636c68ce4fe34c1b6c34bbd86. Affects linux versions < 6.7.9-1. Fixed in 6.7.9-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to software applications. It is widely used across various platforms, including servers, desktops, and embedded systems. This vulnerability specifically affects the Linux kernel versions in Debian 13 and 14, which are crucial for system stability and performance.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified due to the reversion of a commit intended to resolve a reboot exception for the SI Oland graphics architecture. This reversion leads to system hangs when Display Core (DC) is enabled and causes errors during driver reboot and power-off cycles. The issue arises from the improper handling of hardware states during these operations, potentially leading to system instability and data loss.
How To Fix
Minimum fixed version
6.7.9-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users may disable the Display Core (DC) feature if it is not essential for their operations. This can be done by modifying the kernel boot parameters or using system configuration tools to prevent the DC from being enabled during startup.
Conclusion
The identified vulnerability in the Linux kernel poses significant risks to system stability and performance. Users are strongly advised to update their kernel to the patched version 6.7.9-1 to mitigate these risks. Temporary workarounds are available, but applying the update is the best course of action for long-term security.
See every vulnerability recorded for linux →
FAQ
The vulnerability can cause system hangs and errors during reboot and power-off cycles, leading to potential data loss and system instability.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Yes, the patched version of the Linux kernel is 6.7.9-1 for both Debian 13 and 14.
As a temporary measure, consider disabling the Display Core feature to mitigate the effects of the vulnerability until you can apply the update.
Detailed information can be found in the CVE report and through security advisories related to the Linux kernel.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
