CVE-2023-52633

Severity CVSS v4.0:
Pending analysis
Type:
CWE-787 Out-of-bounds Write
Publication date:
02/04/2024
Last modified:
17/03/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> um: time-travel: fix time corruption<br /> <br /> In &amp;#39;basic&amp;#39; time-travel mode (without =inf-cpu or =ext), we<br /> still get timer interrupts. These can happen at arbitrary<br /> points in time, i.e. while in timer_read(), which pushes<br /> time forward just a little bit. Then, if we happen to get<br /> the interrupt after calculating the new time to push to,<br /> but before actually finishing that, the interrupt will set<br /> the time to a value that&amp;#39;s incompatible with the forward,<br /> and we&amp;#39;ll crash because time goes backwards when we do the<br /> forwarding.<br /> <br /> Fix this by reading the time_travel_time, calculating the<br /> adjustment, and doing the adjustment all with interrupts<br /> disabled.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.15.149 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 6.1.77 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.2 (including) 6.6.16 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.7.4 (excluding)