CVE-2023-52859
published 2024-05-21CVE-2023-52859: In the Linux kernel, the following vulnerability has been resolved: perf: hisi: Fix use-after-free when register pmu fails When we fail to register the uncore…
PriorityP338high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.24%
15.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
perf: hisi: Fix use-after-free when register pmu fails
When we fail to register the uncore pmu, the pmu context may not been
allocated. The error handing will call cpuhp_state_remove_instance()
to call uncore pmu offline callback, which migrate the pmu context.
Since that's liable to lead to some kind of use-after-free.
Use cpuhp_state_remove_instance_nocalls() instead of
cpuhp_state_remove_instance() so that the notifiers don't execute after
the PMU device has been failed to register.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.64-1 (bookworm) | linux 6.1.64-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 3bf30882c3c7b6e376d9d6d04082c9aa2d2ac30a < 0e1e88bba286621b886218363de07b319d6208b2 | 0e1e88bba286621b886218363de07b319d6208b2 |
| linux | linux | >= 3bf30882c3c7b6e376d9d6d04082c9aa2d2ac30a < b660420f449d094b1fabfa504889810b3a63cdd5 | b660420f449d094b1fabfa504889810b3a63cdd5 |
| linux | linux | >= 3bf30882c3c7b6e376d9d6d04082c9aa2d2ac30a < 3405f364f82d4f5407a8b4c519dc15d24b847fda | 3405f364f82d4f5407a8b4c519dc15d24b847fda |
| linux | linux | >= 3bf30882c3c7b6e376d9d6d04082c9aa2d2ac30a < 75bab28ffd05ec8879c197890b1bd1dfec8d3f63 | 75bab28ffd05ec8879c197890b1bd1dfec8d3f63 |
| linux | linux | >= 3bf30882c3c7b6e376d9d6d04082c9aa2d2ac30a < b805cafc604bfdb671fae7347a57f51154afa735 | b805cafc604bfdb671fae7347a57f51154afa735 |
| linux | linux_kernel | >= 0 < 6.1.64-1 | 6.1.64-1 |
| linux | linux_kernel | >= 0 < 6.6.8-1 | 6.6.8-1 |
| linux | linux_kernel | >= 0 < 6.6.8-1 | 6.6.8-1 |
| linux | linux_kernel | >= 5.13 < 5.15.139 | 5.15.139 |
| linux | linux_kernel | >= 5.16 < 6.1.63 | 6.1.63 |
| linux | linux_kernel | >= 6.2 < 6.5.12 | 6.5.12 |
| linux | linux_kernel | >= 6.6 < 6.6.2 | 6.6.2 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-72f9-x2qq-3795: In the Linux kernel, the following vulnerability has been resolved:
perf: hisi: Fix use-after-free when register pmu fails
When we fail to register
ghsa_unreviewed·2024-05-21
CVE-2023-52859 [HIGH] CWE-416 GHSA-72f9-x2qq-3795: In the Linux kernel, the following vulnerability has been resolved:
perf: hisi: Fix use-after-free when register pmu fails
When we fail to register
In the Linux kernel, the following vulnerability has been resolved:
perf: hisi: Fix use-after-free when register pmu fails
When we fail to register the uncore pmu, the pmu context may not been
allocated. The error handing will call cpuhp_state_remove_instance()
to call uncore pmu offline callback, which migrate the pmu context.
Since that's liable to lead to some kind of use-after-free.
Use cpuhp_state_remove_instance_nocalls() instead of
cpuhp_state_remove_instance() so that the notifiers don't execute after
the PMU device has been failed to register.
OSV
CVE-2023-52859: In the Linux kernel, the following vulnerability has been resolved: perf: hisi: Fix use-after-free when register pmu fails When we fail to register th
osv·2024-05-21·CVSS 7.8
CVE-2023-52859 [HIGH] CVE-2023-52859: In the Linux kernel, the following vulnerability has been resolved: perf: hisi: Fix use-after-free when register pmu fails When we fail to register th
In the Linux kernel, the following vulnerability has been resolved: perf: hisi: Fix use-after-free when register pmu fails When we fail to register the uncore pmu, the pmu context may not been allocated. The error handing will call cpuhp_state_remove_instance() to call uncore pmu offline callback, which migrate the pmu context. Since that's liable to lead to some kind of use-after-free. Use cpuhp_state_remove_instance_nocalls() instead of cpuhp_state_remove_instance() so that the notifiers don't execute after the PMU device has been failed to register.
Red Hat
kernel: perf: hisi: Fix use-after-free when register pmu fails
vendor_redhat·2024-05-21·CVSS 7.8
CVE-2023-52859 [HIGH] CWE-416 kernel: perf: hisi: Fix use-after-free when register pmu fails
kernel: perf: hisi: Fix use-after-free when register pmu fails
In the Linux kernel, the following vulnerability has been resolved:
perf: hisi: Fix use-after-free when register pmu fails
When we fail to register the uncore pmu, the pmu context may not been
allocated. The error handing will call cpuhp_state_remove_instance()
to call uncore pmu offline callback, which migrate the pmu context.
Since that's liable to lead to some kind of use-after-free.
Use cpuhp_state_remove_instance_nocalls() instead of
cpuhp_state_remove_instance() so that the notifiers don't execute after
the PMU device has been failed to register.
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not
Debian
CVE-2023-52859: linux - In the Linux kernel, the following vulnerability has been resolved: perf: hisi:...
vendor_debian·2023·CVSS 7.8
CVE-2023-52859 [HIGH] CVE-2023-52859: linux - In the Linux kernel, the following vulnerability has been resolved: perf: hisi:...
In the Linux kernel, the following vulnerability has been resolved: perf: hisi: Fix use-after-free when register pmu fails When we fail to register the uncore pmu, the pmu context may not been allocated. The error handing will call cpuhp_state_remove_instance() to call uncore pmu offline callback, which migrate the pmu context. Since that's liable to lead to some kind of use-after-free. Use cpuhp_state_remove_instance_nocalls() instead of cpuhp_state_remove_instance() so that the notifiers don't execute after the PMU device has been failed to register.
Scope: local
bookworm: resolved (fixed in 6.1.64-1)
bullseye: resolved
forky: resolved (fixed in 6.6.8-1)
sid: resolved (fixed in 6.6.8-1)
trixie: resolved (fixed in 6.6.8-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/0e1e88bba286621b886218363de07b319d6208b2https://git.kernel.org/stable/c/3405f364f82d4f5407a8b4c519dc15d24b847fdahttps://git.kernel.org/stable/c/75bab28ffd05ec8879c197890b1bd1dfec8d3f63https://git.kernel.org/stable/c/b660420f449d094b1fabfa504889810b3a63cdd5https://git.kernel.org/stable/c/b805cafc604bfdb671fae7347a57f51154afa735https://git.kernel.org/stable/c/0e1e88bba286621b886218363de07b319d6208b2https://git.kernel.org/stable/c/3405f364f82d4f5407a8b4c519dc15d24b847fdahttps://git.kernel.org/stable/c/75bab28ffd05ec8879c197890b1bd1dfec8d3f63https://git.kernel.org/stable/c/b660420f449d094b1fabfa504889810b3a63cdd5https://git.kernel.org/stable/c/b805cafc604bfdb671fae7347a57f51154afa735
2024-05-21
Published