Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2023-52615
HistoryMar 18, 2024 - 11:15 a.m.

CVE-2023-52615

2024-03-1811:15:08
Debian Security Bug Tracker
security-tracker.debian.org
8
linux kernel
hwrng device
deadlock prevention

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.1%

In the Linux kernel, the following vulnerability has been resolved: hwrng: core - Fix page fault dead lock on mmap-ed hwrng There is a dead-lock in the hwrng device read path. This triggers when the user reads from /dev/hwrng into memory also mmap-ed from /dev/hwrng. The resulting page fault triggers a recursive read which then dead-locks. Fix this by using a stack buffer when calling copy_to_user.

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.1%