CVE-2023-52993
published 2025-03-27CVE-2023-52993: In the Linux kernel, the following vulnerability has been resolved: x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL Baoquan reported that after triggering…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.25%
16.8th percentile
In the Linux kernel, the following vulnerability has been resolved:
x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
Baoquan reported that after triggering a crash the subsequent crash-kernel
fails to boot about half of the time. It triggers a NULL pointer
dereference in the periodic tick code.
This happens because the legacy timer interrupt (IRQ0) is resent in
software which happens in soft interrupt (tasklet) context. In this context
get_irq_regs() returns NULL which leads to the NULL pointer dereference.
The reason for the resend is a spurious APIC interrupt on the IRQ0 vector
which is captured and leads to a resend when the legacy timer interrupt is
enabled. This is wrong because the legacy PIC interrupts are level
triggered and therefore should never be resent in software, but nothing
ever sets the IRQ_LEVEL flag on those interrupts, so the core code does not
know about their trigger type.
Ensure that IRQ_LEVEL is set when the legacy PCI interrupts are set up.
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.11-1 (bookworm) | linux 6.1.11-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= a4633adcdbc15ac51afcd0e1395de58cee27cf92 < 744fe9be9665227335539b7a77ece8d9ff62b6c0 | 744fe9be9665227335539b7a77ece8d9ff62b6c0 |
| linux | linux | >= a4633adcdbc15ac51afcd0e1395de58cee27cf92 < 496975d1a2937f4baadf3d985991b13fc4fc4f27 | 496975d1a2937f4baadf3d985991b13fc4fc4f27 |
| linux | linux | >= a4633adcdbc15ac51afcd0e1395de58cee27cf92 < 8770cd9d7c14aa99c255a0d08186f0be953e1638 | 8770cd9d7c14aa99c255a0d08186f0be953e1638 |
| linux | linux | >= a4633adcdbc15ac51afcd0e1395de58cee27cf92 < e284c273dbb4c1ed68d4204bff94d0b10e4a90f5 | e284c273dbb4c1ed68d4204bff94d0b10e4a90f5 |
| linux | linux | >= a4633adcdbc15ac51afcd0e1395de58cee27cf92 < 0b08201158f177aab469e356b4d6af24fdd118df | 0b08201158f177aab469e356b4d6af24fdd118df |
| linux | linux | >= a4633adcdbc15ac51afcd0e1395de58cee27cf92 < 137f1b47da5f58805da42c1b7811e28c1e353f39 | 137f1b47da5f58805da42c1b7811e28c1e353f39 |
| linux | linux | >= a4633adcdbc15ac51afcd0e1395de58cee27cf92 < 5fa55950729d0762a787451dc52862c3f850f859 | 5fa55950729d0762a787451dc52862c3f850f859 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.11-1 | 6.1.11-1 |
| linux | linux_kernel | >= 0 < 6.1.11-1 | 6.1.11-1 |
| linux | linux_kernel | >= 0 < 6.1.11-1 | 6.1.11-1 |
| linux | linux_kernel | >= 2.6.18 < 4.14.305 | 4.14.305 |
| linux | linux_kernel | >= 4.15 < 4.19.272 | 4.19.272 |
| linux | linux_kernel | >= 4.20 < 5.4.231 | 5.4.231 |
| linux | linux_kernel | >= 5.11 < 5.15.91 | 5.15.91 |
| linux | linux_kernel | >= 5.16 < 6.1.9 | 6.1.9 |
| linux | linux_kernel | >= 5.5 < 5.10.166 | 5.10.166 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-g7hp-hfwm-x3rp: In the Linux kernel, the following vulnerability has been resolved:
x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
Baoquan reported that after
ghsa_unreviewed·2025-03-27
CVE-2023-52993 [MEDIUM] CWE-476 GHSA-g7hp-hfwm-x3rp: In the Linux kernel, the following vulnerability has been resolved:
x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
Baoquan reported that after
In the Linux kernel, the following vulnerability has been resolved:
x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
Baoquan reported that after triggering a crash the subsequent crash-kernel
fails to boot about half of the time. It triggers a NULL pointer
dereference in the periodic tick code.
This happens because the legacy timer interrupt (IRQ0) is resent in
software which happens in soft interrupt (tasklet) context. In this context
get_irq_regs() returns NULL which leads to the NULL pointer dereference.
The reason for the resend is a spurious APIC interrupt on the IRQ0 vector
which is captured and leads to a resend when the legacy timer interrupt is
enabled. This is wrong because the legacy PIC interrupts are level
triggered and therefore should never be resent in software, but
OSV
CVE-2023-52993: In the Linux kernel, the following vulnerability has been resolved: x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL Baoquan reported that after t
osv·2025-03-27·CVSS 5.5
CVE-2023-52993 [MEDIUM] CVE-2023-52993: In the Linux kernel, the following vulnerability has been resolved: x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL Baoquan reported that after t
In the Linux kernel, the following vulnerability has been resolved: x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL Baoquan reported that after triggering a crash the subsequent crash-kernel fails to boot about half of the time. It triggers a NULL pointer dereference in the periodic tick code. This happens because the legacy timer interrupt (IRQ0) is resent in software which happens in soft interrupt (tasklet) context. In this context get_irq_regs() returns NULL which leads to the NULL pointer dereference. The reason for the resend is a spurious APIC interrupt on the IRQ0 vector which is captured and leads to a resend when the legacy timer interrupt is enabled. This is wrong because the legacy PIC interrupts are level triggered and therefore should never be resent in software, but not
Red Hat
kernel: x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
vendor_redhat·2025-03-27·CVSS 5.5
CVE-2023-52993 [MEDIUM] CWE-476 kernel: x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
kernel: x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
In the Linux kernel, the following vulnerability has been resolved:
x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL
Baoquan reported that after triggering a crash the subsequent crash-kernel
fails to boot about half of the time. It triggers a NULL pointer
dereference in the periodic tick code.
This happens because the legacy timer interrupt (IRQ0) is resent in
software which happens in soft interrupt (tasklet) context. In this context
get_irq_regs() returns NULL which leads to the NULL pointer dereference.
The reason for the resend is a spurious APIC interrupt on the IRQ0 vector
which is captured and leads to a resend when the legacy timer interrupt is
enabled. This is wrong because the legacy PIC interrupts are level
trigg
Debian
CVE-2023-52993: linux - In the Linux kernel, the following vulnerability has been resolved: x86/i8259: ...
vendor_debian·2023·CVSS 5.5
CVE-2023-52993 [MEDIUM] CVE-2023-52993: linux - In the Linux kernel, the following vulnerability has been resolved: x86/i8259: ...
In the Linux kernel, the following vulnerability has been resolved: x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL Baoquan reported that after triggering a crash the subsequent crash-kernel fails to boot about half of the time. It triggers a NULL pointer dereference in the periodic tick code. This happens because the legacy timer interrupt (IRQ0) is resent in software which happens in soft interrupt (tasklet) context. In this context get_irq_regs() returns NULL which leads to the NULL pointer dereference. The reason for the resend is a spurious APIC interrupt on the IRQ0 vector which is captured and leads to a resend when the legacy timer interrupt is enabled. This is wrong because the legacy PIC interrupts are level triggered and therefore should never be resent in software, but not
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://git.kernel.org/stable/c/0b08201158f177aab469e356b4d6af24fdd118dfhttps://git.kernel.org/stable/c/137f1b47da5f58805da42c1b7811e28c1e353f39https://git.kernel.org/stable/c/496975d1a2937f4baadf3d985991b13fc4fc4f27https://git.kernel.org/stable/c/5fa55950729d0762a787451dc52862c3f850f859https://git.kernel.org/stable/c/744fe9be9665227335539b7a77ece8d9ff62b6c0https://git.kernel.org/stable/c/8770cd9d7c14aa99c255a0d08186f0be953e1638https://git.kernel.org/stable/c/e284c273dbb4c1ed68d4204bff94d0b10e4a90f5
2025-03-27
Published