In the Linux kernel, the following vulnerability has been resolved:
hwrng: core - Fix page fault dead lock on mmap-ed hwrng
There is a dead-lock in the hwrng device read path. This triggers
when the user reads from /dev/hwrng into memory also mmap-ed from
/dev/hwrng. The resulting page fault triggers a recursive read
which then dead-locks.
Fix this by using a stack buffer when calling copy_to_user.
Metrics
Affected Vendors & Products
References
History
Wed, 11 Sep 2024 13:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: Linux
Published: 2024-03-18T10:14:45.503Z
Updated: 2024-09-11T17:33:21.562Z
Reserved: 2024-03-06T09:52:12.089Z
Link: CVE-2023-52615
Vulnrichment
Updated: 2024-09-11T12:42:16.313Z
NVD
Status : Awaiting Analysis
Published: 2024-03-18T11:15:08.797
Modified: 2024-06-27T12:15:15.583
Link: CVE-2023-52615
Redhat