CVE-2023-52576
published 2024-03-02CVE-2023-52576: In the Linux kernel, the following vulnerability has been resolved: x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer() The code calling…
PriorityP421medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.22%
12.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()
The code calling ima_free_kexec_buffer() runs long after the memblock
allocator has already been torn down, potentially resulting in a use
after free in memblock_isolate_range().
With KASAN or KFENCE, this use after free will result in a BUG
from the idle task, and a subsequent kernel panic.
Switch ima_free_kexec_buffer() over to memblock_free_late() to avoid
that bug.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.64-1 (bookworm) | linux 6.1.64-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= fee3ff99bc67604fba77f19da0106f3ec52b1956 < eef16bfdb212da60f5144689f2967fb25b051a2b | eef16bfdb212da60f5144689f2967fb25b051a2b |
| linux | linux | >= fee3ff99bc67604fba77f19da0106f3ec52b1956 < d2dfbc0e3b7a04c2d941421a958dc31c897fb204 | d2dfbc0e3b7a04c2d941421a958dc31c897fb204 |
| linux | linux | >= fee3ff99bc67604fba77f19da0106f3ec52b1956 < 34cf99c250d5cd2530b93a57b0de31d3aaf8685b | 34cf99c250d5cd2530b93a57b0de31d3aaf8685b |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 6.1.64-1 | 6.1.64-1 |
| linux | linux_kernel | >= 0 < 6.5.6-1 | 6.5.6-1 |
| linux | linux_kernel | >= 0 < 6.5.6-1 | 6.5.6-1 |
| linux | linux_kernel | >= 5.13 < 6.1.56 | 6.1.56 |
| linux | linux_kernel | >= 6.2 < 6.5.6 | 6.5.6 |
| msrc | cbl2_kernel_5.15.182.1-1_on_cbl_mariner_2.0 | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_msrc5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Microsoft
x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()
vendor_msrc·2024-03-12·CVSS 5.5
CVE-2023-52576 [MEDIUM] CWE-416 x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()
x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
Mariner: Mariner
Linux: Linux
Customer Action Required: Yes
Red Hat
kernel: x86/mm, kexec, ima: potential use-after-free in memblock_isolate_range()
vendor_redhat·2024-03-02·CVSS 5.5
CVE-2023-52576 [MEDIUM] CWE-416 kernel: x86/mm, kexec, ima: potential use-after-free in memblock_isolate_range()
kernel: x86/mm, kexec, ima: potential use-after-free in memblock_isolate_range()
In the Linux kernel, the following vulnerability has been resolved:
x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()
The code calling ima_free_kexec_buffer() runs long after the memblock
allocator has already been torn down, potentially resulting in a use
after free in memblock_isolate_range().
With KASAN or KFENCE, this use after free will result in a BUG
from the idle task, and a subsequent kernel panic.
Switch ima_free_kexec_buffer() over to memblock_free_late() to avoid
that bug.
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (
Debian
CVE-2023-52576: linux - In the Linux kernel, the following vulnerability has been resolved: x86/mm, kex...
vendor_debian·2023·CVSS 5.5
CVE-2023-52576 [MEDIUM] CVE-2023-52576: linux - In the Linux kernel, the following vulnerability has been resolved: x86/mm, kex...
In the Linux kernel, the following vulnerability has been resolved: x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer() The code calling ima_free_kexec_buffer() runs long after the memblock allocator has already been torn down, potentially resulting in a use after free in memblock_isolate_range(). With KASAN or KFENCE, this use after free will result in a BUG from the idle task, and a subsequent kernel panic. Switch ima_free_kexec_buffer() over to memblock_free_late() to avoid that bug.
Scope: local
bookworm: resolved (fixed in 6.1.64-1)
bullseye: resolved
forky: resolved (fixed in 6.5.6-1)
sid: resolved (fixed in 6.5.6-1)
trixie: resolved (fixed in 6.5.6-1)
GHSA
GHSA-jj48-3v62-2vf9: In the Linux kernel, the following vulnerability has been resolved:
x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()
The co
ghsa_unreviewed·2024-03-03
CVE-2023-52576 [MEDIUM] CWE-416 GHSA-jj48-3v62-2vf9: In the Linux kernel, the following vulnerability has been resolved:
x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()
The co
In the Linux kernel, the following vulnerability has been resolved:
x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()
The code calling ima_free_kexec_buffer() runs long after the memblock
allocator has already been torn down, potentially resulting in a use
after free in memblock_isolate_range().
With KASAN or KFENCE, this use after free will result in a BUG
from the idle task, and a subsequent kernel panic.
Switch ima_free_kexec_buffer() over to memblock_free_late() to avoid
that bug.
OSV
CVE-2023-52576: In the Linux kernel, the following vulnerability has been resolved: x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer() The code
osv·2024-03-02·CVSS 5.5
CVE-2023-52576 [MEDIUM] CVE-2023-52576: In the Linux kernel, the following vulnerability has been resolved: x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer() The code
In the Linux kernel, the following vulnerability has been resolved: x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer() The code calling ima_free_kexec_buffer() runs long after the memblock allocator has already been torn down, potentially resulting in a use after free in memblock_isolate_range(). With KASAN or KFENCE, this use after free will result in a BUG from the idle task, and a subsequent kernel panic. Switch ima_free_kexec_buffer() over to memblock_free_late() to avoid that bug.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/34cf99c250d5cd2530b93a57b0de31d3aaf8685bhttps://git.kernel.org/stable/c/d2dfbc0e3b7a04c2d941421a958dc31c897fb204https://git.kernel.org/stable/c/eef16bfdb212da60f5144689f2967fb25b051a2bhttps://git.kernel.org/stable/c/34cf99c250d5cd2530b93a57b0de31d3aaf8685bhttps://git.kernel.org/stable/c/d2dfbc0e3b7a04c2d941421a958dc31c897fb204https://git.kernel.org/stable/c/eef16bfdb212da60f5144689f2967fb25b051a2b
2024-03-02
Published