CVE-2023-52606: linux kernel

csirt@kutim:~/threat-intel/cve/CVE-2023-52606

CVSS 5.5 · Medium EPSS 0,25%

Kerentanan Allocation of Resources Without Limits or Throttling pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: powerpc/lib: Validate size for vector operations Some of the fp/vmx code in sstep.c assume a certain maximum size for the instructions being emulated. The size of those operations however is determined separately in analyse_instr(). Add a check to validate the assumption on the maximum size of the operations, so as to prevent any unintended kernel stack corruption.

Rincian

Terbit di NVD: 6 Maret 2024
Terakhir diubah: 4 Agustus 2026
Status NVD: Modified
CVSS 3.1: 5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-770: Allocation of Resources Without Limits or Throttling
EPSS (30 hari): 0,25% peluang dieksploitasi; lebih tinggi dari 14,5% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
linux	linux kernel	Semua versi sebelum 4.19.307
linux	linux kernel	Versi 4.20 hingga sebelum 5.4.269
linux	linux kernel	Versi 5.5 hingga sebelum 5.10.210
linux	linux kernel	Versi 5.11 hingga sebelum 5.15.149
linux	linux kernel	Versi 5.16 hingga sebelum 6.1.77
linux	linux kernel	Versi 6.2 hingga sebelum 6.6.16
linux	linux kernel	Versi 6.7 hingga sebelum 6.7.4

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://git.kernel.org/stable/c/0580f4403ad33f379eef865c2a6fe94de37febdf mailing list · patch
https://git.kernel.org/stable/c/28b8ba8eebf26f66d9f2df4ba550b6b3b136082c mailing list · patch
https://git.kernel.org/stable/c/42084a428a139f1a429f597d44621e3a18f3e414 mailing list · patch
https://git.kernel.org/stable/c/848e1d7fd710900397e1d0e7584680c1c04e3afd mailing list · patch
https://git.kernel.org/stable/c/8f9abaa6d7de0a70fc68acaedce290c1f96e2e59 mailing list · patch
https://git.kernel.org/stable/c/abd26515d4b767ba48241eea77b28ce0872aef3e mailing list · patch
https://git.kernel.org/stable/c/beee482cc4c9a6b1dcffb2e190b4fd8782258678 mailing list · patch
https://git.kernel.org/stable/c/de4f5ed63b8a199704d8cdcbf810309d7eb4b36b mailing list · patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html mailing list · patch

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.