UBUNTU-CVE-2023-52462

    Dashboard / Vulnerabilities / UBUNTU-CVE-2023-52462

    UBUNTU-CVE-2023-52462

    Published: 23 Feb 2024Last Modified: 8 Oct 2026
    Upstream:
    CVE-2023-52462
    Aliases:
    USN-6688-1
    USN-6725-1
    USN-6725-2

    Summary:

    Details: In the Linux kernel, the following vulnerability has been resolved: bpf: fix check for attempt to corrupt spilled pointer When register is spilled onto a stack as a 1/2/4-byte register, we set slot_type[BPF_REG_SIZE - 1] (plus potentially few more below it, depending on actual spill size). So to check if some stack slot has spilled register we need to consult slot_type[7], not slot_type[0]. To avoid the need to remember and double-check this in the future, just use is_spilled_reg() helper.

    References: https://ubuntu.com/security/CVE-2023-52462, https://git.kernel.org/stable/c/2757f17972d87773b3677777f5682510f13c66ef, https://git.kernel.org/stable/c/67e6707f07354ed1acb4e65552e97c60cf9d69cf, https://git.kernel.org/stable/c/fc3e3c50a0a4cac1463967c110686189e4a59104, https://git.kernel.org/stable/c/8dc15b0670594543c356567a1a45b0182ec63174, https://git.kernel.org/stable/c/40617d45ea05535105e202a8a819e388a2b1f036, https://git.kernel.org/stable/c/ab125ed3ec1c10ccc36bc98c7a4256ad114a3dae, https://ubuntu.com/security/notices/USN-6688-1, https://ubuntu.com/security/notices/USN-6725-1, https://www.cve.org/CVERecord?id=CVE-2023-52462, https://ubuntu.com/security/notices/USN-6725-2, https://ubuntu.com/security/notices/USN-6818-1, https://ubuntu.com/security/notices/USN-6819-1, https://ubuntu.com/security/notices/USN-6818-2, https://ubuntu.com/security/notices/USN-6819-2, https://ubuntu.com/security/notices/USN-6819-3, https://ubuntu.com/security/notices/USN-6818-3, https://ubuntu.com/security/notices/USN-6818-4, https://ubuntu.com/security/notices/USN-6819-4

    Affected packages

    Package

    Name: linux-hwe-edge

    Purl: pkg:deb/ubuntu/linux-hwe-edge?arch=source&distro=xenial

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    4.8.0-28.30~16.04.1
    4.8.0-30.32~16.04.1
    4.8.0-32.34~16.04.1
    4.8.0-34.36~16.04.1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    UBUNTU-CVE-2023-52462 | CVE-DB