Lucene search

K
redhatcveRedhat.comRH:CVE-2023-52576
HistoryMar 04, 2024 - 6:21 p.m.

CVE-2023-52576

2024-03-0418:21:28
redhat.com
access.redhat.com
7
linux kernel
vulnerability
cve-2023-52576
memblock_free_late()

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved: x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer() The code calling ima_free_kexec_buffer() runs long after the memblock allocator has already been torn down, potentially resulting in a use after free in memblock_isolate_range(). With KASAN or KFENCE, this use after free will result in a BUG from the idle task, and a subsequent kernel panic. Switch ima_free_kexec_buffer() over to memblock_free_late() to avoid that bug.

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%