CVE-2023-52598
Last modified
CVE-2023-52598 is a high-severity vulnerability rated 7.1/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: s390/ptrace: handle setting of fpc register correctly If the content of the floating point control (fpc) register of a traced process is modified with the ptrace interface the new value is tested for validity by temporarily loading it into the fpc register. This may lead to corruption of the fpc register of the tracing process: if an interrupt happens while the value is temporarily loaded into the fpc register, and within interrupt context floating point or vector registers are used, the current fp/vx registers are saved with save_fpu_regs() assuming they belong to user space and will be loaded into fp/vx registers when returning to user space. test_fp_ctl() restores the original user space fpc register value, however it will be discarded, when returning to user space. In result the tracer will incorrectly continue to run with the value that was supposed to be used for the traced process. Fix this by saving fpu register contents with save_fpu_regs() before using test_fp_ctl().. EPSS estimates a 0.24% chance of exploitation in the next 30 days.
Description
In the Linux kernel, the following vulnerability has been resolved: s390/ptrace: handle setting of fpc register correctly If the content of the floating point control (fpc) register of a traced process is modified with the ptrace interface the new value is tested for validity by temporarily loading it into the fpc register. This may lead to corruption of the fpc register of the tracing process: if an interrupt happens while the value is temporarily loaded into the fpc register, and within interrupt context floating point or vector registers are used, the current fp/vx registers are saved with save_fpu_regs() assuming they belong to user space and will be loaded into fp/vx registers when returning to user space. test_fp_ctl() restores the original user space fpc register value, however it will be discarded, when returning to user space. In result the tracer will incorrectly continue to run with the value that was supposed to be used for the traced process. Fix this by saving fpu register contents with save_fpu_regs() before using test_fp_ctl().
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | < 4.19.307 |
| Linux | Linux Kernel | >= 4.20, < 5.4.269 |
| Linux | Linux Kernel | >= 5.5, < 5.10.210 |
| Linux | Linux Kernel | >= 5.11, < 5.15.149 |
| Linux | Linux Kernel | >= 5.16, < 6.1.77 |
| Linux | Linux Kernel | >= 6.2, < 6.6.16 |
| Linux | Linux Kernel | >= 6.7, < 6.7.4 |
References
- https://git.kernel.org/stable/c/02c6bbfb08bad78dd014e24c7b893723c15ec7a1Mailing List, Patch
- https://git.kernel.org/stable/c/28a1f492cb527f64593457a0a0f0d809b3f36c25Mailing List, Patch
- https://git.kernel.org/stable/c/6ccf904aac0292e1f6b1a1be6c407c414f7cf713Mailing List, Patch
- https://git.kernel.org/stable/c/6d0822f2cc9b153bf2df49a84599195a2e0d21a8Mailing List, Patch
- https://git.kernel.org/stable/c/7a4d6481fbdd661f9e40e95febb95e3dee82bad3Mailing List, Patch
- https://git.kernel.org/stable/c/856caf2730ea18cb39e95833719c02a02447dc0aMailing List, Patch
- https://git.kernel.org/stable/c/8b13601d19c541158a6e18b278c00ba69ae37829Mailing List, Patch
- https://git.kernel.org/stable/c/bdce67df7f12fb0409fbc604ce7c4254703f56d4Mailing List, Patch
- https://git.kernel.org/stable/c/02c6bbfb08bad78dd014e24c7b893723c15ec7a1Mailing List, Patch
- https://git.kernel.org/stable/c/28a1f492cb527f64593457a0a0f0d809b3f36c25Mailing List, Patch
- https://git.kernel.org/stable/c/6ccf904aac0292e1f6b1a1be6c407c414f7cf713Mailing List, Patch
- https://git.kernel.org/stable/c/6d0822f2cc9b153bf2df49a84599195a2e0d21a8Mailing List, Patch
- https://git.kernel.org/stable/c/7a4d6481fbdd661f9e40e95febb95e3dee82bad3Mailing List, Patch
- https://git.kernel.org/stable/c/856caf2730ea18cb39e95833719c02a02447dc0aMailing List, Patch
- https://git.kernel.org/stable/c/8b13601d19c541158a6e18b278c00ba69ae37829Mailing List, Patch
- https://git.kernel.org/stable/c/bdce67df7f12fb0409fbc604ce7c4254703f56d4Mailing List, Patch
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.htmlMailing List, Patch
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2023-52598?
How severe is CVE-2023-52598?
How do I fix CVE-2023-52598?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-52592Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2023-52593In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2023-52594In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2023-52595In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2023-52596In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2023-52597In the Linux kernel, the following vulnerability has been re…4
- CVE-2023-52599In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2023-5260A vulnerability, which was classified as critical, has been …9.8
- CVE-2023-52600In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2023-52601In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2023-52602In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2023-52603In the Linux kernel, the following vulnerability has been re…7.8
Are you affected by CVE-2023-52598?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
