Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-52576
HistoryMar 02, 2024 - 12:00 a.m.

CVE-2023-52576

2024-03-0200:00:00
ubuntu.com
ubuntu.com
8
linux
kernel
vulnerability
cve-2023-52576
x86/mm
kexec
ima
memblock_free_late
use after free
bug
memblock_isolate_range
kasan
kfence
kernel panic
security

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved: x86/mm,
kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer() The code
calling ima_free_kexec_buffer() runs long after the memblock allocator has
already been torn down, potentially resulting in a use after free in
memblock_isolate_range(). With KASAN or KFENCE, this use after free will
result in a BUG from the idle task, and a subsequent kernel panic. Switch
ima_free_kexec_buffer() over to memblock_free_late() to avoid that bug.

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%