CVE-2023-53986: In the Linux kernel, the following vulnerability has been resolved: mips: bmips: BCM6358: disable RAC flush for TP1 RAC flush causes kernel panics on BCM6358…

PriorityP343high8.6CVSS 3.1

AVNACLPRNUINSUCLILAH

EPSS

0.44%

36.8th percentile

In the Linux kernel, the following vulnerability has been resolved: mips: bmips: BCM6358: disable RAC flush for TP1 RAC flush causes kernel panics on BCM6358 with EHCI/OHCI when booting from TP1: [ 3.881739] usb 1-1: new high-speed USB device number 2 using ehci-platform [ 3.895011] Reserved instruction in kernel code[#1]: [ 3.900113] CPU: 0 PID: 1 Comm: init Not tainted 5.10.16 #0 [ 3.905829] $ 0 : 00000000 10008700 00000000 77d94060 [ 3.911238] $ 4 : 7fd1f088 00000000 81431cac 81431ca0 [ 3.916641] $ 8 : 00000000 ffffefff 8075cd34 00000000 [ 3.922043] $12 : 806f8d40 f3e812b7 00000000 000d9aaa [ 3.927446] $16 : 7fd1f068 7fd1f080 7ff559b8 81428470 [ 3.932848] $20 : 00000000 00000000 55590000 77d70000 [ 3.938251] $24 : 00000018 00000010 [ 3.943655] $28 : 81430000 81431e60 81431f28 800157fc [ 3.949058] Hi : 00000000 [ 3.952013] Lo : 00000000 [ 3.955019] epc : 80015808 setup_sigcontext+0x54/0x24c [ 3.960464] ra : 800157fc setup_sigcontext+0x48/0x24c [ 3.965913] Status: 10008703 KERNEL EXL IE [ 3.970216] Cause : 00800028 (ExcCode 0a) [ 3.974340] PrId : 0002a010 (Broadcom BMIPS4350) [ 3.979170] Modules linked in: ohci_platform ohci_hcd fsl_mph_dr_of ehci_platform ehci_fsl ehci_hcd gpio_button_hotplug usbcore nls_base usb_common [ 3.992907] Process init (pid: 1, threadinfo=(ptrval), task=(ptrval), tls=77e22ec8) [ 4.000776] Stack : 81431ef4 7fd1f080 81431f28 81428470 7fd1f068 81431edc 7ff559b8 81428470 [ 4.009467] 81431f28 7fd1f080 55590000 77d70000 77d5498c 80015c70 806f0000 8063ae74 [ 4.018149] 08100002 81431f28 0000000a 08100002 81431f28 0000000a 77d6b418 00000003 [ 4.026831] ffffffff 80016414 80080734 81431ecc 81431ecc 00000001 00000000 04000000 [ 4.035512] 77d54874 00000000 00000000 00000000 00000000 00000012 00000002 00000000 [ 4.044196] ... [ 4.046706] Call Trace: [ 4.049238] [] setup_sigcontext+0x54/0x24c [ 4.054356] [] setup_frame+0xdc/0x124 [ 4.059015] [] do_notify_resume+0x1dc/0x288 [ 4.064207] [] work_notifysig+0x10/0x18 [ 4.069036] [ 4.070538] Code: 8fc300b4

Affected

17 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 6.1.25-1 (bookworm)	linux 6.1.25-1 (bookworm)
linux	linux	—	—
linux	linux	>= d59098a0e9cb3c7767090e935c909b37a30629ab < d65de5ee8b72868fbbbd39ca73017d0e526fa13a	d65de5ee8b72868fbbbd39ca73017d0e526fa13a
linux	linux	>= d59098a0e9cb3c7767090e935c909b37a30629ab < 47a449ec09b4479b89dcc6b27ec3829fc82ffafb	47a449ec09b4479b89dcc6b27ec3829fc82ffafb
linux	linux	>= d59098a0e9cb3c7767090e935c909b37a30629ab < 65b723644294f1d79770704162c0e8d1f700b6f1	65b723644294f1d79770704162c0e8d1f700b6f1
linux	linux	>= d59098a0e9cb3c7767090e935c909b37a30629ab < 2cdbcff99f15db86a10672fb220379a1ae46ccae	2cdbcff99f15db86a10672fb220379a1ae46ccae
linux	linux	>= d59098a0e9cb3c7767090e935c909b37a30629ab < 288c96aa5b5526cd4a946e84ef85e165857693b5	288c96aa5b5526cd4a946e84ef85e165857693b5
linux	linux	>= d59098a0e9cb3c7767090e935c909b37a30629ab < ab327f8acdf8d06601fbf058859a539a9422afff	ab327f8acdf8d06601fbf058859a539a9422afff
linux	linux_kernel	>= 0 < 5.10.178-1	5.10.178-1
linux	linux_kernel	>= 0 < 6.1.25-1	6.1.25-1
linux	linux_kernel	>= 0 < 6.1.25-1	6.1.25-1
linux	linux_kernel	>= 0 < 6.1.25-1	6.1.25-1
linux	linux_kernel	>= 4.19.0 < 5.4.240	5.4.240
linux	linux_kernel	>= 5.11.0 < 5.15.106	5.15.106
linux	linux_kernel	>= 5.16.0 < 6.1.23	6.1.23
linux	linux_kernel	>= 5.5.0 < 5.10.177	5.10.177
linux	linux_kernel	>= 6.2.0 < 6.2.10	6.2.10

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.