Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2023-52633
HistoryApr 02, 2024 - 6:49 a.m.

CVE-2023-52633 um: time-travel: fix time corruption

2024-04-0206:49:11
Linux
github.com
linux kernel
time corruption
vulnerability

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

um: time-travel: fix time corruption

In ‘basic’ time-travel mode (without =inf-cpu or =ext), we
still get timer interrupts. These can happen at arbitrary
points in time, i.e. while in timer_read(), which pushes
time forward just a little bit. Then, if we happen to get
the interrupt after calculating the new time to push to,
but before actually finishing that, the interrupt will set
the time to a value that’s incompatible with the forward,
and we’ll crash because time goes backwards when we do the
forwarding.

Fix this by reading the time_travel_time, calculating the
adjustment, and doing the adjustment all with interrupts
disabled.

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial