CVE-2023-52978

In the Linux kernel, the following vulnerability has been resolved: riscv: kprobe: Fixup kernel panic when probing an illegal position The kernel would panic when probed for an illegal position. eg: (CONFIG_RISCV_ISA_C=n) echo 'p:hello kernel_clone+0x16 a0=%a0' >> kprobe_events echo 1 > events/kprobes/hello/enable cat trace Kernel panic - not syncing: stack-protector: Kernel stack is corrupted in: __do_sys_newfstatat+0xb8/0xb8 CPU: 0 PID: 111 Comm: sh Not tainted 6.2.0-rc1-00027-g2d398fe49a4d #490 Hardware name: riscv-virtio,qemu (DT) Call Trace: [<ffffffff80007268>] dump_backtrace+0x38/0x48 [<ffffffff80c5e83c>] show_stack+0x50/0x68 [<ffffffff80c6da28>] dump_stack_lvl+0x60/0x84 [<ffffffff80c6da6c>] dump_stack+0x20/0x30 [<ffffffff80c5ecf4>] panic+0x160/0x374 [<ffffffff80c6db94>] generic_handle_arch_irq+0x0/0xa8 [<ffffffff802deeb0>] sys_newstat+0x0/0x30 [<ffffffff800158c0>] sys_clone+0x20/0x30 [<ffffffff800039e8>] ret_from_syscall+0x0/0x4 ---[ end Kernel panic - not syncing: stack-protector: Kernel stack is corrupted in: __do_sys_newfstatat+0xb8/0xb8 ]--- That is because the kprobe's ebreak instruction broke the kernel's original code. The user should guarantee the correction of the probe position, but it couldn't make the kernel panic. This patch adds arch_check_kprobe in arch_prepare_kprobe to prevent an illegal position (Such as the middle of an instruction).

• https://git.kernel.org/stable/c/04a73558209554da17f46490ec4faaaf1b2bab68Patch
• https://git.kernel.org/stable/c/12316538b1d193064109ce1a28fc9bacd43950dePatch
• https://git.kernel.org/stable/c/87f48c7ccc73afc78630530d9af51f458f58cab8Patch

Published

Mar 27, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-52972Huawei PCs have a vulnerability that allows low-privilege us…5.5
• CVE-2023-52973In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2023-52974In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2023-52975In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2023-52976In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52977In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52979Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-5298A vulnerability was found in Tongda OA 2017. It has been rat…7.5
• CVE-2023-52980In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2023-52981In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52982In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52983In the Linux kernel, the following vulnerability has been re…7.8