CVE-2023-52731
published 2024-05-21CVE-2023-52731: In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix invalid page access after closing deferred I/O devices When a fbdev with…
PriorityP338high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.24%
15.8th percentile
In the Linux kernel, the following vulnerability has been resolved:
fbdev: Fix invalid page access after closing deferred I/O devices
When a fbdev with deferred I/O is once opened and closed, the dirty
pages still remain queued in the pageref list, and eventually later
those may be processed in the delayed work. This may lead to a
corruption of pages, hitting an Oops.
This patch makes sure to cancel the delayed work and clean up the
pageref list at closing the device for addressing the bug. A part of
the cleanup code is factored out as a new helper function that is
called from the common fb_release().
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.15-1 (bookworm) | linux 6.1.15-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 186b89659c4c67cccead52961eab0ca3b23951dc < 87b9802ca824fcee7915e717e9a60471af62e8e9 | 87b9802ca824fcee7915e717e9a60471af62e8e9 |
| linux | linux | >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < f1d91f0e9d5a240a809698d7d9c5a538e7dcc149 | f1d91f0e9d5a240a809698d7d9c5a538e7dcc149 |
| linux | linux | >= 56c134f7f1b58be08bdb0ca8372474a4a5165f31 < 3efc61d95259956db25347e2a9562c3e54546e20 | 3efc61d95259956db25347e2a9562c3e54546e20 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 6.1.15-1 | 6.1.15-1 |
| linux | linux_kernel | >= 0 < 6.1.15-1 | 6.1.15-1 |
| linux | linux_kernel | >= 0 < 6.1.15-1 | 6.1.15-1 |
| linux | linux_kernel | >= 5.19 < 6.1.13 | 6.1.13 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: fbdev: Fix invalid page access after closing deferred I/O devices
vendor_redhat·2024-05-21·CVSS 7.8
CVE-2023-52731 [HIGH] CWE-119 kernel: fbdev: Fix invalid page access after closing deferred I/O devices
kernel: fbdev: Fix invalid page access after closing deferred I/O devices
In the Linux kernel, the following vulnerability has been resolved:
fbdev: Fix invalid page access after closing deferred I/O devices
When a fbdev with deferred I/O is once opened and closed, the dirty
pages still remain queued in the pageref list, and eventually later
those may be processed in the delayed work. This may lead to a
corruption of pages, hitting an Oops.
This patch makes sure to cancel the delayed work and clean up the
pageref list at closing the device for addressing the bug. A part of
the cleanup code is factored out as a new helper function that is
called from the common fb_release().
Package: kernel (Red Hat Enterprise Linux 6) - Out of support scope
Package: kernel (Red Hat Enterprise Linux 7) -
Debian
CVE-2023-52731: linux - In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix ...
vendor_debian·2023·CVSS 7.8
CVE-2023-52731 [HIGH] CVE-2023-52731: linux - In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix ...
In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix invalid page access after closing deferred I/O devices When a fbdev with deferred I/O is once opened and closed, the dirty pages still remain queued in the pageref list, and eventually later those may be processed in the delayed work. This may lead to a corruption of pages, hitting an Oops. This patch makes sure to cancel the delayed work and clean up the pageref list at closing the device for addressing the bug. A part of the cleanup code is factored out as a new helper function that is called from the common fb_release().
Scope: local
bookworm: resolved (fixed in 6.1.15-1)
bullseye: resolved
forky: resolved (fixed in 6.1.15-1)
sid: resolved (fixed in 6.1.15-1)
trixie: resolved (fixed in 6.1.15-1)
GHSA
GHSA-w9fv-gm94-h938: In the Linux kernel, the following vulnerability has been resolved:
fbdev: Fix invalid page access after closing deferred I/O devices
When a fbdev w
ghsa_unreviewed·2024-05-21
CVE-2023-52731 [HIGH] CWE-125 GHSA-w9fv-gm94-h938: In the Linux kernel, the following vulnerability has been resolved:
fbdev: Fix invalid page access after closing deferred I/O devices
When a fbdev w
In the Linux kernel, the following vulnerability has been resolved:
fbdev: Fix invalid page access after closing deferred I/O devices
When a fbdev with deferred I/O is once opened and closed, the dirty
pages still remain queued in the pageref list, and eventually later
those may be processed in the delayed work. This may lead to a
corruption of pages, hitting an Oops.
This patch makes sure to cancel the delayed work and clean up the
pageref list at closing the device for addressing the bug. A part of
the cleanup code is factored out as a new helper function that is
called from the common fb_release().
OSV
CVE-2023-52731: In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix invalid page access after closing deferred I/O devices When a fbdev wit
osv·2024-05-21·CVSS 7.8
CVE-2023-52731 [HIGH] CVE-2023-52731: In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix invalid page access after closing deferred I/O devices When a fbdev wit
In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix invalid page access after closing deferred I/O devices When a fbdev with deferred I/O is once opened and closed, the dirty pages still remain queued in the pageref list, and eventually later those may be processed in the delayed work. This may lead to a corruption of pages, hitting an Oops. This patch makes sure to cancel the delayed work and clean up the pageref list at closing the device for addressing the bug. A part of the cleanup code is factored out as a new helper function that is called from the common fb_release().
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/3efc61d95259956db25347e2a9562c3e54546e20https://git.kernel.org/stable/c/87b9802ca824fcee7915e717e9a60471af62e8e9https://git.kernel.org/stable/c/f1d91f0e9d5a240a809698d7d9c5a538e7dcc149https://git.kernel.org/stable/c/3efc61d95259956db25347e2a9562c3e54546e20https://git.kernel.org/stable/c/87b9802ca824fcee7915e717e9a60471af62e8e9https://git.kernel.org/stable/c/f1d91f0e9d5a240a809698d7d9c5a538e7dcc149
2024-05-21
Published