Reachable assertion in Linux kernel - CVE-2023-52562

Vulnerability identifier: #VU90914

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-52562

CWE-ID: CWE-617

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to reachable assertion within the slab_kmem_cache_release() and kmem_cache_destroy() functions in mm/slab_common.c. A local user can perform a denial of service (DoS) attack.

Linux kernel
Amazon Linux AMI
Anolis OS
kernel-devel
kernel-doc
kernel-abi-stablelists
python3-perf
perf
kernel-tools-libs-devel
kernel-tools-libs
kernel-tools
kernel-modules-extra
kernel-modules
kernel-headers
kernel-debug-modules-extra
kernel-debug-modules
kernel-debug-devel
kernel-debug-core
kernel-debug
kernel-cross-headers
kernel-core
kernel
bpftool

Install update from vendor's website.

Linux kernel - addressed in versions 6.1.56, 6.5.6, 6.6
kernel-devel - update to 4.18.0-513.24.1.0.1
kernel-doc - update to 4.18.0-513.24.1.0.1
kernel-abi-stablelists - update to 4.18.0-513.24.1.0.1
python3-perf - update to 4.18.0-513.24.1.0.1
perf - update to 4.18.0-513.24.1.0.1
kernel-tools-libs-devel - update to 4.18.0-513.24.1.0.1
kernel-tools-libs - update to 4.18.0-513.24.1.0.1
kernel-tools - update to 4.18.0-513.24.1.0.1
kernel-modules-extra - update to 4.18.0-513.24.1.0.1
kernel-modules - update to 4.18.0-513.24.1.0.1
kernel-headers - update to 4.18.0-513.24.1.0.1
kernel-debug-modules-extra - update to 4.18.0-513.24.1.0.1
kernel-debug-modules - update to 4.18.0-513.24.1.0.1
kernel-debug-devel - update to 4.18.0-513.24.1.0.1
kernel-debug-core - update to 4.18.0-513.24.1.0.1
kernel-debug - update to 4.18.0-513.24.1.0.1
kernel-cross-headers - update to 4.18.0-513.24.1.0.1
kernel-core - update to 4.18.0-513.24.1.0.1
kernel - update to 4.18.0-513.24.1.0.1
bpftool - update to 4.18.0-513.24.1.0.1
kernel - update to 6.1.56-82.125

• https://git.kernel.org/stable/c/a5569bb187521432f509b69dda7d29f78b2d38b0
• https://git.kernel.org/stable/c/51988be187b041e5355245957b0b9751fa382e0d
• https://git.kernel.org/stable/c/46a9ea6681907a3be6b6b0d43776dccc62cad6cf
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.56
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.6
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6

• Reachable assertion in Linux kernel mm
• Amazon Linux AMI update for kernel
• Anolis OS update for kernel