CVE-2023-53634Linux vulnerability

5 documents5 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 98.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 7

Description

In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fixed a BTI error on returning to patched function When BPF_TRAMP_F_CALL_ORIG is set, BPF trampoline uses BLR to jump back to the instruction next to call site to call the patched function. For BTI-enabled kernel, the instruction next to call site is usually PACIASP, in this case, it's safe to jump back with BLR. But when the call site is not followed by a PACIASP or bti, a BTI exception is triggered. Here is a fa

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

NVDlinux/linux_kernel6.06.1.25+2
Debianlinux/linux_kernel< 6.1.25-1+2
CVEListV5linux/linuxefc9909fdce00a827a37609628223cd45bf95d0b8b9c64942ada229f52fe6f1b537a50f88b3c2673+3
debiandebian/linux< linux 6.1.25-1 (bookworm)

Patches

🔴Vulnerability Details

2
OSV
CVE-2023-53634: In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fixed a BTI error on returning to patched function When BPF_TRAMP_F_CA2025-10-07
GHSA
GHSA-826h-69x5-63pc: In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fixed a BTI error on returning to patched function When BPF_TRAMP_F_2025-10-07

📋Vendor Advisories

2
Red Hat
kernel: bpf, arm64: Fixed a BTI error on returning to patched function2025-10-07
Debian
CVE-2023-53634: linux - In the Linux kernel, the following vulnerability has been resolved: bpf, arm64:...2023