Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-52606

powerpc/lib: Validate size for vector operations

Description

In the Linux kernel, the following vulnerability has been resolved: powerpc/lib: Validate size for vector operations Some of the fp/vmx code in sstep.c assume a certain maximum size for the instructions being emulated. The size of those operations however is determined separately in analyse_instr(). Add a check to validate the assumption on the maximum size of the operations, so as to prevent any unintended kernel stack corruption.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • c22435a5f3d8f85ea162ae523a6ba60a58521ba5 to < 42084a428a139f1a429f597d44621e3a18f3e414affected
  • c22435a5f3d8f85ea162ae523a6ba60a58521ba5 to < 0580f4403ad33f379eef865c2a6fe94de37febdfaffected
  • c22435a5f3d8f85ea162ae523a6ba60a58521ba5 to < beee482cc4c9a6b1dcffb2e190b4fd8782258678affected
  • c22435a5f3d8f85ea162ae523a6ba60a58521ba5 to < de4f5ed63b8a199704d8cdcbf810309d7eb4b36baffected
  • c22435a5f3d8f85ea162ae523a6ba60a58521ba5 to < abd26515d4b767ba48241eea77b28ce0872aef3eaffected
  • c22435a5f3d8f85ea162ae523a6ba60a58521ba5 to < 28b8ba8eebf26f66d9f2df4ba550b6b3b136082caffected
  • c22435a5f3d8f85ea162ae523a6ba60a58521ba5 to < 848e1d7fd710900397e1d0e7584680c1c04e3afdaffected
  • c22435a5f3d8f85ea162ae523a6ba60a58521ba5 to < 8f9abaa6d7de0a70fc68acaedce290c1f96e2e59affected

Linux Linux

Default version status: affected

  • 4.14affected
  • 0 to < 4.14unaffected
  • 4.19.307 to ≤ 4.19.*unaffected
  • 5.4.269 to ≤ 5.4.*unaffected
  • 5.10.210 to ≤ 5.10.*unaffected
  • 5.15.149 to ≤ 5.15.*unaffected
  • 6.1.77 to ≤ 6.1.*unaffected
  • 6.6.16 to ≤ 6.6.*unaffected
  • 6.7.4 to ≤ 6.7.*unaffected
  • 6.8 to ≤ *unaffected

References