CVE-2023-52677

riscv: Check if the code to patch lies in the exit section

Description

In the Linux kernel, the following vulnerability has been resolved: riscv: Check if the code to patch lies in the exit section Otherwise we fall through to vmalloc_to_page() which panics since the address does not lie in the vmalloc region.

N/A

CVSS

Severity:

EPSS 0.10%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/938f70d14618ec72e10d6fcf8a546134136d7c13
https://git.kernel.org/stable/c/890cfe5337e0aaf03ece1429db04d23c88da72e7
https://git.kernel.org/stable/c/8db56df4a954b774bdc68917046a685a9fa2e4bc
https://git.kernel.org/stable/c/1d7a03052846f34d624d0ab41a879adf5e85c85f
https://git.kernel.org/stable/c/420370f3ae3d3b883813fd3051a38805160b2b9f

Frequently Asked Questions

What is the severity of CVE-2023-52677?: CVE-2023-52677 has not yet been assigned a CVSS score.
How to fix CVE-2023-52677?: To fix CVE-2023-52677, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2023-52677 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2023-52677 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2023-52677?: CVE-2023-52677 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.