CVE-2023-52633: um: time-travel: fix time corruption
In the Linux kernel, the following vulnerability has been resolved:
um: time-travel: fix time corruption
In 'basic' time-travel mode (without =inf-cpu or =ext), we still get timer interrupts. These can happen at arbitrary points in time, i.e. while in timerread(), which pushes time forward just a little bit. Then, if we happen to get the interrupt after calculating the new time to push to, but before actually finishing that, the interrupt will set the time to a value that's incompatible with the forward, and we'll crash because time goes backwards when we do the forwarding.
Fix this by reading the timetraveltime, calculating the adjustment, and doing the adjustment all with interrupts disabled.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52633?
CVE-2023-52633 has been rated as a medium severity vulnerability within the Linux kernel.
How do I fix CVE-2023-52633?
To resolve CVE-2023-52633, users should update to the patched versions of the Linux kernel, specifically versions 6.1.123-1, 6.1.119-1, 6.12.11-1, or 6.12.12-1.
What software versions are affected by CVE-2023-52633?
CVE-2023-52633 affects Linux kernel versions up to and including 5.10.226-1.
What is the impact of CVE-2023-52633?
The impact of CVE-2023-52633 involves potential time corruption issues that could affect system table timings.
Who is affected by CVE-2023-52633?
Users of specific versions of the Linux kernel on Debian-based systems are affected by CVE-2023-52633.