#VU93682 Input validation error in Linux kernel - CVE-2023-52659

Vulnerability identifier: #VU93682

Vulnerability risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52659

CWE-ID: CWE-20

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the arch/x86/include/asm/page.h. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

---

External links
https://git.kernel.org/stable/c/325956b0173f11e98f90462be4829a8b8b0682ce
https://git.kernel.org/stable/c/7e1471888a5e6e846e9b4d306e5327db2b58e64e
https://git.kernel.org/stable/c/814305b5c23cb815ada68d43019f39050472b25f
https://git.kernel.org/stable/c/8e5647a723c49d73b9f108a8bb38e8c29d3948ea

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.