CVE-2023-52790: swiotlb: fix out-of-bounds TLB allocations with CONFIG_SWIOTLB_DYNAMIC
In the Linux kernel, the following vulnerability has been resolved:
swiotlb: fix out-of-bounds TLB allocations with CONFIGSWIOTLBDYNAMIC
Limit the free list length to the size of the IO TLB. Transient pool can be smaller than IOTLBSEGSIZE, but the free list is initialized with the assumption that the total number of slots is a multiple of IOTLBSEGSIZE. As a result, swiotlbareafindslots() may allocate slots past the end of a transient IO TLB buffer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52790?
CVE-2023-52790 has been classified as having a moderate severity level due to its potential impact on system stability and security.
How do I fix CVE-2023-52790?
To fix CVE-2023-52790, ensure that you update your Linux kernel to the latest patched version provided by your Linux distribution.
What versions of the Linux kernel are affected by CVE-2023-52790?
CVE-2023-52790 affects various versions of the Linux kernel that do not have the fix applied.
What types of systems are vulnerable to CVE-2023-52790?
Systems running vulnerable versions of the Linux kernel with CONFIG_SWIOTLB_DYNAMIC enabled are susceptible to CVE-2023-52790.
Are there any known exploits for CVE-2023-52790?
As of now, there are no publicly known exploits for CVE-2023-52790, but it is recommended to mitigate the risk by applying the necessary updates.