• CVE-2023-52494

发布时间: 2024年4月26日

修改时间: 2025年2月15日

概要

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Add alignment check for event ring read pointer Though we do check the event ring read pointer by "is_valid_ring_ptr" to make sure it is in the buffer range, but there is another risk the pointer may be not aligned. Since we are expecting event ring elements are 128 bits(struct mhi_ring_element) aligned, an unaligned read pointer could lead to multiple issues like DoS or ring buffer memory corruption. So add a alignment check for event ring read pointer.

CVSS v3 指标

NVD openEuler
Confidentiality High None
Attack Vector Local Local
CVSS评分 7.8 4.4
Attack Complexity Low Low
Privileges Required Low High
Scope Unchanged Unchanged
Integrity High None
User Interaction None None
Availability High High

安全公告

公告名 概要 发布时间
KylinSec-SA-2024-1509 kernel security update 2024年4月26日

影响产品

产品 状态
KY3.4-4A kernel Unaffected
KY3.4-5A kernel Unaffected
KY3.5.1 kernel Fixed
KY3.5.2 kernel Fixed