CVE-2023-52860
Severity CVSS v4.0:
Pending analysis
Type:
CWE-476
NULL Pointer Dereference
Publication date:
21/05/2024
Last modified:
03/02/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process<br />
<br />
When tearing down a &#39;hisi_hns3&#39; PMU, we mistakenly run the CPU hotplug<br />
callbacks after the device has been unregistered, leading to fireworks<br />
when we try to execute empty function callbacks within the driver:<br />
<br />
| Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000<br />
| CPU: 0 PID: 15 Comm: cpuhp/0 Tainted: G W O 5.12.0-rc4+ #1<br />
| Hardware name: , BIOS KpxxxFPGA 1P B600 V143 04/22/2021<br />
| pstate: 80400009 (Nzcv daif +PAN -UAO -TCO BTYPE=--)<br />
| pc : perf_pmu_migrate_context+0x98/0x38c<br />
| lr : perf_pmu_migrate_context+0x94/0x38c<br />
|<br />
| Call trace:<br />
| perf_pmu_migrate_context+0x98/0x38c<br />
| hisi_hns3_pmu_offline_cpu+0x104/0x12c [hisi_hns3_pmu]<br />
<br />
Use cpuhp_state_remove_instance_nocalls() instead of<br />
cpuhp_state_remove_instance() so that the notifiers don&#39;t execute after<br />
the PMU device has been unregistered.<br />
<br />
[will: Rewrote commit message]
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.0 (including) | 6.1.63 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.2 (including) | 6.5.12 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.6 (including) | 6.6.2 (excluding) |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/3f5827371763f2d9c70719c270055a81d030f3d0
- https://git.kernel.org/stable/c/4589403a343bb0c72a6faf5898386ff964d4e01a
- https://git.kernel.org/stable/c/50b560783f7f71790bcf70e9e9855155fb0af8c1
- https://git.kernel.org/stable/c/d04ff5437a45f275db5530efb49b68d0ec851f6f
- https://git.kernel.org/stable/c/3f5827371763f2d9c70719c270055a81d030f3d0
- https://git.kernel.org/stable/c/4589403a343bb0c72a6faf5898386ff964d4e01a
- https://git.kernel.org/stable/c/50b560783f7f71790bcf70e9e9855155fb0af8c1
- https://git.kernel.org/stable/c/d04ff5437a45f275db5530efb49b68d0ec851f6f



