CVE-2023-52462: bpf: fix check for attempt to corrupt spilled pointer
In the Linux kernel, the following vulnerability has been resolved:
bpf: fix check for attempt to corrupt spilled pointer
When register is spilled onto a stack as a 1/2/4-byte register, we set slottype[BPFREGSIZE - 1] (plus potentially few more below it, depending on actual spill size). So to check if some stack slot has spilled register we need to consult slottype[7], not slottype[0].
To avoid the need to remember and double-check this in the future, just use isspilledreg() helper.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52462?
CVE-2023-52462 has been classified as a moderate severity vulnerability in the Linux kernel.
What versions of the Linux kernel are affected by CVE-2023-52462?
CVE-2023-52462 affects multiple versions of the Linux kernel, particularly those prior to specific patched versions such as 6.1.125 and 5.10.226.
How do I fix CVE-2023-52462?
To resolve CVE-2023-52462, update the Linux kernel to the fixed versions provided by your distribution, such as 6.8 for Red Hat or specific versions listed by Debian.
Is CVE-2023-52462 related to BPF functionality?
Yes, CVE-2023-52462 addresses an issue in the BPF (Berkeley Packet Filter) subsystem of the Linux kernel.
Can CVE-2023-52462 lead to system corruption?
Yes, CVE-2023-52462 involves a vulnerability that has the potential to corrupt data within the kernel's BPF pointer handling.