CVE-2023-52481
Last modified
CVE-2023-52481 is a medium-severity vulnerability rated 4.7/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: arm64: errata: Add Cortex-A520 speculative unprivileged load workaround Implement the workaround for ARM Cortex-A520 erratum 2966298. On an affected Cortex-A520 core, a speculatively executed unprivileged load might leak data from a privileged load via a cache side channel. EPSS estimates a 0.60% chance of exploitation in the next 30 days.
Description
In the Linux kernel, the following vulnerability has been resolved: arm64: errata: Add Cortex-A520 speculative unprivileged load workaround Implement the workaround for ARM Cortex-A520 erratum 2966298. On an affected Cortex-A520 core, a speculatively executed unprivileged load might leak data from a privileged load via a cache side channel. The issue only exists for loads within a translation regime with the same translation (e.g. same ASID and VMID). Therefore, the issue only affects the return to EL0. The workaround is to execute a TLBI before returning to EL0 after all loads of privileged data. A non-shareable TLBI to any address is sufficient. The workaround isn't necessary if page table isolation (KPTI) is enabled, but for simplicity it will be. Page table isolation should normally be disabled for Cortex-A520 as it supports the CSV3 feature and the E0PD feature (used when KASLR is enabled).
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Linux | Linux Kernel | < 6.1.57 | — |
| Linux | Linux Kernel | >= 6.2, < 6.5.7 | — |
| Linux | Linux Kernel | 6.6 | Rc1 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2023-52481?
How severe is CVE-2023-52481?
How do I fix CVE-2023-52481?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-52475In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2023-52476In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2023-52477In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2023-52478In the Linux kernel, the following vulnerability has been re…4.7
- CVE-2023-52479In the Linux kernel, the following vulnerability has been re…8.8
- CVE-2023-52480In the Linux kernel, the following vulnerability has been re…7
- CVE-2023-52482In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2023-52483In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2023-52484In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2023-52485In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2023-52486In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2023-52487In the Linux kernel, the following vulnerability has been re…5.5
Are you affected by CVE-2023-52481?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST