CVE - CVE-2023-52615

CVE-ID
CVE-2023-52615	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: hwrng: core - Fix page fault dead lock on mmap-ed hwrng There is a dead-lock in the hwrng device read path. This triggers when the user reads from /dev/hwrng into memory also mmap-ed from /dev/hwrng. The resulting page fault triggers a recursive read which then dead-locks. Fix this by using a stack buffer when calling copy_to_user.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/26cc6d7006f922df6cc4389248032d955750b2a0 URL:https://git.kernel.org/stable/c/26cc6d7006f922df6cc4389248032d955750b2a0 MISC:https://git.kernel.org/stable/c/5030d4c798863ccb266563201b341a099e8cdd48 URL:https://git.kernel.org/stable/c/5030d4c798863ccb266563201b341a099e8cdd48 MISC:https://git.kernel.org/stable/c/6822a14271786150e178869f1495cc03e74c5029 URL:https://git.kernel.org/stable/c/6822a14271786150e178869f1495cc03e74c5029 MISC:https://git.kernel.org/stable/c/78aafb3884f6bc6636efcc1760c891c8500b9922 URL:https://git.kernel.org/stable/c/78aafb3884f6bc6636efcc1760c891c8500b9922 MISC:https://git.kernel.org/stable/c/aa8aa16ed9adf1df05bb339d588cf485a011839e URL:https://git.kernel.org/stable/c/aa8aa16ed9adf1df05bb339d588cf485a011839e MISC:https://git.kernel.org/stable/c/c6a8111aacbfe7a8a70f46cc0de8eed00561693c URL:https://git.kernel.org/stable/c/c6a8111aacbfe7a8a70f46cc0de8eed00561693c MISC:https://git.kernel.org/stable/c/eafd83b92f6c044007a3591cbd476bcf90455990 URL:https://git.kernel.org/stable/c/eafd83b92f6c044007a3591cbd476bcf90455990 MISC:https://git.kernel.org/stable/c/ecabe8cd456d3bf81e92c53b074732f3140f170d URL:https://git.kernel.org/stable/c/ecabe8cd456d3bf81e92c53b074732f3140f170d
Assigning CNA
kernel.org
Date Record Created
20240306	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240306)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)

Use of the CVE® List and the associated references from this website are subject to the terms of use. CVE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA). Copyright © 1999–2024, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation.