GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2023-52899 (GCVE-0-2023-52899)

Vulnerability from cvelistv5 – Published: 2024-08-21 06:10 – Updated: 2026-05-11 19:35
VLAI
Title
Add exception protection processing for vd in axi_chan_handle_err function
Summary
In the Linux kernel, the following vulnerability has been resolved: Add exception protection processing for vd in axi_chan_handle_err function Since there is no protection for vd, a kernel panic will be triggered here in exceptional cases. You can refer to the processing of axi_chan_block_xfer_complete function The triggered kernel panic is as follows: [ 67.848444] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000060 [ 67.848447] Mem abort info: [ 67.848449] ESR = 0x96000004 [ 67.848451] EC = 0x25: DABT (current EL), IL = 32 bits [ 67.848454] SET = 0, FnV = 0 [ 67.848456] EA = 0, S1PTW = 0 [ 67.848458] Data abort info: [ 67.848460] ISV = 0, ISS = 0x00000004 [ 67.848462] CM = 0, WnR = 0 [ 67.848465] user pgtable: 4k pages, 48-bit VAs, pgdp=00000800c4c0b000 [ 67.848468] [0000000000000060] pgd=0000000000000000, p4d=0000000000000000 [ 67.848472] Internal error: Oops: 96000004 [#1] SMP [ 67.848475] Modules linked in: dmatest [ 67.848479] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.10.100-emu_x2rc+ #11 [ 67.848483] pstate: 62000085 (nZCv daIf -PAN -UAO +TCO BTYPE=--) [ 67.848487] pc : axi_chan_handle_err+0xc4/0x230 [ 67.848491] lr : axi_chan_handle_err+0x30/0x230 [ 67.848493] sp : ffff0803fe55ae50 [ 67.848495] x29: ffff0803fe55ae50 x28: ffff800011212200 [ 67.848500] x27: ffff0800c42c0080 x26: ffff0800c097c080 [ 67.848504] x25: ffff800010d33880 x24: ffff80001139d850 [ 67.848508] x23: ffff0800c097c168 x22: 0000000000000000 [ 67.848512] x21: 0000000000000080 x20: 0000000000002000 [ 67.848517] x19: ffff0800c097c080 x18: 0000000000000000 [ 67.848521] x17: 0000000000000000 x16: 0000000000000000 [ 67.848525] x15: 0000000000000000 x14: 0000000000000000 [ 67.848529] x13: 0000000000000000 x12: 0000000000000040 [ 67.848533] x11: ffff0800c0400248 x10: ffff0800c040024a [ 67.848538] x9 : ffff800010576cd4 x8 : ffff0800c0400270 [ 67.848542] x7 : 0000000000000000 x6 : ffff0800c04003e0 [ 67.848546] x5 : ffff0800c0400248 x4 : ffff0800c4294480 [ 67.848550] x3 : dead000000000100 x2 : dead000000000122 [ 67.848555] x1 : 0000000000000100 x0 : ffff0800c097c168 [ 67.848559] Call trace: [ 67.848562] axi_chan_handle_err+0xc4/0x230 [ 67.848566] dw_axi_dma_interrupt+0xf4/0x590 [ 67.848569] __handle_irq_event_percpu+0x60/0x220 [ 67.848573] handle_irq_event+0x64/0x120 [ 67.848576] handle_fasteoi_irq+0xc4/0x220 [ 67.848580] __handle_domain_irq+0x80/0xe0 [ 67.848583] gic_handle_irq+0xc0/0x138 [ 67.848585] el1_irq+0xc8/0x180 [ 67.848588] arch_cpu_idle+0x14/0x2c [ 67.848591] default_idle_call+0x40/0x16c [ 67.848594] do_idle+0x1f0/0x250 [ 67.848597] cpu_startup_entry+0x2c/0x60 [ 67.848600] rest_init+0xc0/0xcc [ 67.848603] arch_call_rest_init+0x14/0x1c [ 67.848606] start_kernel+0x4cc/0x500 [ 67.848610] Code: eb0002ff 9a9f12d6 f2fbd5a2 f2fbd5a3 (a94602c1) [ 67.848613] ---[ end trace 585a97036f88203a ]---
Severity
No CVSS data available.
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-09-10 16:03 UTC
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 1fe20f1b84548bbcf48b6659ea171cd46618ea3a , < f534dc438828cc3f1f8c6895b8bdfbef079521fb (git)
Affected: 1fe20f1b84548bbcf48b6659ea171cd46618ea3a , < 53dd833fd0a2d8f0118d01ea063a70652689d31e (git)
Affected: 1fe20f1b84548bbcf48b6659ea171cd46618ea3a , < 20d0a6d17e85a8a816a64fa7d7cae616f1617833 (git)
Affected: 1fe20f1b84548bbcf48b6659ea171cd46618ea3a , < 5054d001ffaf76155637c5e5b922c11016cd6a5d (git)
Affected: 1fe20f1b84548bbcf48b6659ea171cd46618ea3a , < 51a7ad5b60efac65691729d10745c28fa1016b96 (git)
Affected: 1fe20f1b84548bbcf48b6659ea171cd46618ea3a , < 57054fe516d59d03a7bcf1888e82479ccc244f87 (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.17
Unaffected: 0 , < 4.17 (semver)
Unaffected: 4.19.271 , ≤ 4.19.* (semver)
Unaffected: 5.4.230 , ≤ 5.4.* (semver)
Unaffected: 5.10.165 , ≤ 5.10.* (semver)
Unaffected: 5.15.90 , ≤ 5.15.* (semver)
Unaffected: 6.1.8 , ≤ 6.1.* (semver)
Unaffected: 6.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-52899",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:03:34.135190Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-12T17:33:16.116Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/dma/dw-axi-dmac/dw-axi-dmac-platform.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "f534dc438828cc3f1f8c6895b8bdfbef079521fb",
              "status": "affected",
              "version": "1fe20f1b84548bbcf48b6659ea171cd46618ea3a",
              "versionType": "git"
            },
            {
              "lessThan": "53dd833fd0a2d8f0118d01ea063a70652689d31e",
              "status": "affected",
              "version": "1fe20f1b84548bbcf48b6659ea171cd46618ea3a",
              "versionType": "git"
            },
            {
              "lessThan": "20d0a6d17e85a8a816a64fa7d7cae616f1617833",
              "status": "affected",
              "version": "1fe20f1b84548bbcf48b6659ea171cd46618ea3a",
              "versionType": "git"
            },
            {
              "lessThan": "5054d001ffaf76155637c5e5b922c11016cd6a5d",
              "status": "affected",
              "version": "1fe20f1b84548bbcf48b6659ea171cd46618ea3a",
              "versionType": "git"
            },
            {
              "lessThan": "51a7ad5b60efac65691729d10745c28fa1016b96",
              "status": "affected",
              "version": "1fe20f1b84548bbcf48b6659ea171cd46618ea3a",
              "versionType": "git"
            },
            {
              "lessThan": "57054fe516d59d03a7bcf1888e82479ccc244f87",
              "status": "affected",
              "version": "1fe20f1b84548bbcf48b6659ea171cd46618ea3a",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/dma/dw-axi-dmac/dw-axi-dmac-platform.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.17"
            },
            {
              "lessThan": "4.17",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.271",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.230",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.165",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.90",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.8",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.271",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.230",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.165",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.90",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.8",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2",
                  "versionStartIncluding": "4.17",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nAdd exception protection processing for vd in axi_chan_handle_err function\n\nSince there is no protection for vd, a kernel panic will be\ntriggered here in exceptional cases.\n\nYou can refer to the processing of axi_chan_block_xfer_complete function\n\nThe triggered kernel panic is as follows:\n\n[   67.848444] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000060\n[   67.848447] Mem abort info:\n[   67.848449]   ESR = 0x96000004\n[   67.848451]   EC = 0x25: DABT (current EL), IL = 32 bits\n[   67.848454]   SET = 0, FnV = 0\n[   67.848456]   EA = 0, S1PTW = 0\n[   67.848458] Data abort info:\n[   67.848460]   ISV = 0, ISS = 0x00000004\n[   67.848462]   CM = 0, WnR = 0\n[   67.848465] user pgtable: 4k pages, 48-bit VAs, pgdp=00000800c4c0b000\n[   67.848468] [0000000000000060] pgd=0000000000000000, p4d=0000000000000000\n[   67.848472] Internal error: Oops: 96000004 [#1] SMP\n[   67.848475] Modules linked in: dmatest\n[   67.848479] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.10.100-emu_x2rc+ #11\n[   67.848483] pstate: 62000085 (nZCv daIf -PAN -UAO +TCO BTYPE=--)\n[   67.848487] pc : axi_chan_handle_err+0xc4/0x230\n[   67.848491] lr : axi_chan_handle_err+0x30/0x230\n[   67.848493] sp : ffff0803fe55ae50\n[   67.848495] x29: ffff0803fe55ae50 x28: ffff800011212200\n[   67.848500] x27: ffff0800c42c0080 x26: ffff0800c097c080\n[   67.848504] x25: ffff800010d33880 x24: ffff80001139d850\n[   67.848508] x23: ffff0800c097c168 x22: 0000000000000000\n[   67.848512] x21: 0000000000000080 x20: 0000000000002000\n[   67.848517] x19: ffff0800c097c080 x18: 0000000000000000\n[   67.848521] x17: 0000000000000000 x16: 0000000000000000\n[   67.848525] x15: 0000000000000000 x14: 0000000000000000\n[   67.848529] x13: 0000000000000000 x12: 0000000000000040\n[   67.848533] x11: ffff0800c0400248 x10: ffff0800c040024a\n[   67.848538] x9 : ffff800010576cd4 x8 : ffff0800c0400270\n[   67.848542] x7 : 0000000000000000 x6 : ffff0800c04003e0\n[   67.848546] x5 : ffff0800c0400248 x4 : ffff0800c4294480\n[   67.848550] x3 : dead000000000100 x2 : dead000000000122\n[   67.848555] x1 : 0000000000000100 x0 : ffff0800c097c168\n[   67.848559] Call trace:\n[   67.848562]  axi_chan_handle_err+0xc4/0x230\n[   67.848566]  dw_axi_dma_interrupt+0xf4/0x590\n[   67.848569]  __handle_irq_event_percpu+0x60/0x220\n[   67.848573]  handle_irq_event+0x64/0x120\n[   67.848576]  handle_fasteoi_irq+0xc4/0x220\n[   67.848580]  __handle_domain_irq+0x80/0xe0\n[   67.848583]  gic_handle_irq+0xc0/0x138\n[   67.848585]  el1_irq+0xc8/0x180\n[   67.848588]  arch_cpu_idle+0x14/0x2c\n[   67.848591]  default_idle_call+0x40/0x16c\n[   67.848594]  do_idle+0x1f0/0x250\n[   67.848597]  cpu_startup_entry+0x2c/0x60\n[   67.848600]  rest_init+0xc0/0xcc\n[   67.848603]  arch_call_rest_init+0x14/0x1c\n[   67.848606]  start_kernel+0x4cc/0x500\n[   67.848610] Code: eb0002ff 9a9f12d6 f2fbd5a2 f2fbd5a3 (a94602c1)\n[   67.848613] ---[ end trace 585a97036f88203a ]---"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T19:35:08.716Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/f534dc438828cc3f1f8c6895b8bdfbef079521fb"
        },
        {
          "url": "https://git.kernel.org/stable/c/53dd833fd0a2d8f0118d01ea063a70652689d31e"
        },
        {
          "url": "https://git.kernel.org/stable/c/20d0a6d17e85a8a816a64fa7d7cae616f1617833"
        },
        {
          "url": "https://git.kernel.org/stable/c/5054d001ffaf76155637c5e5b922c11016cd6a5d"
        },
        {
          "url": "https://git.kernel.org/stable/c/51a7ad5b60efac65691729d10745c28fa1016b96"
        },
        {
          "url": "https://git.kernel.org/stable/c/57054fe516d59d03a7bcf1888e82479ccc244f87"
        }
      ],
      "title": "Add exception protection processing for vd in axi_chan_handle_err function",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-52899",
    "datePublished": "2024-08-21T06:10:39.438Z",
    "dateReserved": "2024-08-21T06:07:11.014Z",
    "dateUpdated": "2026-05-11T19:35:08.716Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-52899",
      "date": "2026-09-16",
      "epss": "0.0024",
      "percentile": "0.15248"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"4.19.271\", \"matchCriteriaId\": \"96C6211C-C372-4AC3-90D8-2535A98604D7\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"4.20\", \"versionEndExcluding\": \"5.4.230\", \"matchCriteriaId\": \"9DB7398D-9781-49C5-B2AE-1969B694B614\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.5\", \"versionEndExcluding\": \"5.10.165\", \"matchCriteriaId\": \"C6002D5B-9B6A-4788-B943-E3EE01E01303\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.11\", \"versionEndExcluding\": \"5.15.90\", \"matchCriteriaId\": \"E995CDA5-7223-4FDB-BAD3-81B22C763A43\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.16\", \"versionEndExcluding\": \"6.1.8\", \"matchCriteriaId\": \"A6AFE6C9-3F59-4711-B2CF-7D6682FF6BD0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*\", \"matchCriteriaId\": \"FF501633-2F44-4913-A8EE-B021929F49F6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*\", \"matchCriteriaId\": \"2BDA597B-CAC1-4DF0-86F0-42E142C654E9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*\", \"matchCriteriaId\": \"725C78C9-12CE-406F-ABE8-0813A01D66E8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*\", \"matchCriteriaId\": \"A127C155-689C-4F67-B146-44A57F4BFD85\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nAdd exception protection processing for vd in axi_chan_handle_err function\\n\\nSince there is no protection for vd, a kernel panic will be\\ntriggered here in exceptional cases.\\n\\nYou can refer to the processing of axi_chan_block_xfer_complete function\\n\\nThe triggered kernel panic is as follows:\\n\\n[   67.848444] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000060\\n[   67.848447] Mem abort info:\\n[   67.848449]   ESR = 0x96000004\\n[   67.848451]   EC = 0x25: DABT (current EL), IL = 32 bits\\n[   67.848454]   SET = 0, FnV = 0\\n[   67.848456]   EA = 0, S1PTW = 0\\n[   67.848458] Data abort info:\\n[   67.848460]   ISV = 0, ISS = 0x00000004\\n[   67.848462]   CM = 0, WnR = 0\\n[   67.848465] user pgtable: 4k pages, 48-bit VAs, pgdp=00000800c4c0b000\\n[   67.848468] [0000000000000060] pgd=0000000000000000, p4d=0000000000000000\\n[   67.848472] Internal error: Oops: 96000004 [#1] SMP\\n[   67.848475] Modules linked in: dmatest\\n[   67.848479] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.10.100-emu_x2rc+ #11\\n[   67.848483] pstate: 62000085 (nZCv daIf -PAN -UAO +TCO BTYPE=--)\\n[   67.848487] pc : axi_chan_handle_err+0xc4/0x230\\n[   67.848491] lr : axi_chan_handle_err+0x30/0x230\\n[   67.848493] sp : ffff0803fe55ae50\\n[   67.848495] x29: ffff0803fe55ae50 x28: ffff800011212200\\n[   67.848500] x27: ffff0800c42c0080 x26: ffff0800c097c080\\n[   67.848504] x25: ffff800010d33880 x24: ffff80001139d850\\n[   67.848508] x23: ffff0800c097c168 x22: 0000000000000000\\n[   67.848512] x21: 0000000000000080 x20: 0000000000002000\\n[   67.848517] x19: ffff0800c097c080 x18: 0000000000000000\\n[   67.848521] x17: 0000000000000000 x16: 0000000000000000\\n[   67.848525] x15: 0000000000000000 x14: 0000000000000000\\n[   67.848529] x13: 0000000000000000 x12: 0000000000000040\\n[   67.848533] x11: ffff0800c0400248 x10: ffff0800c040024a\\n[   67.848538] x9 : ffff800010576cd4 x8 : ffff0800c0400270\\n[   67.848542] x7 : 0000000000000000 x6 : ffff0800c04003e0\\n[   67.848546] x5 : ffff0800c0400248 x4 : ffff0800c4294480\\n[   67.848550] x3 : dead000000000100 x2 : dead000000000122\\n[   67.848555] x1 : 0000000000000100 x0 : ffff0800c097c168\\n[   67.848559] Call trace:\\n[   67.848562]  axi_chan_handle_err+0xc4/0x230\\n[   67.848566]  dw_axi_dma_interrupt+0xf4/0x590\\n[   67.848569]  __handle_irq_event_percpu+0x60/0x220\\n[   67.848573]  handle_irq_event+0x64/0x120\\n[   67.848576]  handle_fasteoi_irq+0xc4/0x220\\n[   67.848580]  __handle_domain_irq+0x80/0xe0\\n[   67.848583]  gic_handle_irq+0xc0/0x138\\n[   67.848585]  el1_irq+0xc8/0x180\\n[   67.848588]  arch_cpu_idle+0x14/0x2c\\n[   67.848591]  default_idle_call+0x40/0x16c\\n[   67.848594]  do_idle+0x1f0/0x250\\n[   67.848597]  cpu_startup_entry+0x2c/0x60\\n[   67.848600]  rest_init+0xc0/0xcc\\n[   67.848603]  arch_call_rest_init+0x14/0x1c\\n[   67.848606]  start_kernel+0x4cc/0x500\\n[   67.848610] Code: eb0002ff 9a9f12d6 f2fbd5a2 f2fbd5a3 (a94602c1)\\n[   67.848613] ---[ end trace 585a97036f88203a ]---\"}, {\"lang\": \"es\", \"value\": \"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: Agregar procesamiento de protecci\\u00f3n de excepci\\u00f3n para vd en la funci\\u00f3n axi_chan_handle_err Dado que no hay protecci\\u00f3n para vd, aqu\\u00ed se activar\\u00e1 un p\\u00e1nico del kernel en casos excepcionales. Puede consultar el procesamiento de la funci\\u00f3n axi_chan_block_xfer_complete. El p\\u00e1nico del kernel desencadenado es el siguiente: [67.848444] No se puede manejar la desreferencia del puntero NULL del kernel en la direcci\\u00f3n virtual 0000000000000060 [67.848447] Informaci\\u00f3n de cancelaci\\u00f3n de memoria: [67.848449] ESR = 0x96000004 [67.8 48451] CE = 0x25 : DABT (EL actual), IL = 32 bits [ 67.848454] SET = 0, FnV = 0 [ 67.848456] EA = 0, S1PTW = 0 [ 67.848458] Informaci\\u00f3n de cancelaci\\u00f3n de datos: [ 67.848460] ISV = 0, ISS = 0x00000004 [ 67.848462 ] CM = 0, WnR = 0 [ 67.848465] tabla de p\\u00e1ginas de usuario: p\\u00e1ginas de 4k, VA de 48 bits, pgdp=00000800c4c0b000 [ 67.848468] [0000000000000060] pgd=0000000000000000, 000000000000 [67.848472] Error interno: Ups: 96000004 [#1 ] SMP [67.848475] M\\u00f3dulos vinculados en: dmatest [67.848479] CPU: 0 PID: 0 Comm: swapper/0 No contaminado 5.10.100-emu_x2rc+ #11 [67.848483] pstate: 62000085 (nZCv daIf -PAN -UAO +TCO BTYPE= --) [67.848487] pc: axi_chan_handle_err+0xc4/0x230 [67.848491] lr: axi_chan_handle_err+0x30/0x230 [67.848493] sp: ffff0803fe55ae50 [67.848495] x29: fe55ae50 x28: ffff800011212200 [ 67.848500] x27: ffff0800c42c0080 x26: ffff0800c097c080 [ 67.848504] x25: ffff800010d33880 x24: ffff80001139d850 [ 67.848508] x23: ffff0800c097c168 x22: 0000000000000000 [ 67.848512] x21: 0000000000000080 x20: 0000000000002000 [ 67.848517] x19: ffff0800c097c080 x18: 0000000000000000 [ 67.848521] x17: 0000000000000000 x16: 0000000000000 000 [67.848525] x15: 0000000000000000 x14: 0000000000000000 [ 67.848529] x13: 0000000000000000 x12: 0000000000000040 [ 67.848533] x11: ffff0800c0400248 x10: ffff0800c040024a [ 67.848538] x9: ffff800010576cd4 x8: ffff0800c0400270 [67.848542] x7: 0000000000000000 x6: ffff0800c04003e0 [67.848546] x5: 8x4: ffff0800c4294480 [67.848550] x3 : dead000000000100 x2 : dead000000000122 [ 67.848555 ] x1 : 0000000000000100 x0 : ffff0800c097c168 [ 67.848559 ] Rastreo de llamadas: [ 67.848562] 0x230 [ 67.848566] dw_axi_dma_interrupt+0xf4/0x590 [ 67.848569] __handle_irq_event_percpu+0x60/0x220 [ 67.848573] handle_irq_event+0x64 /0x120 [ 67.848576] handle_fasteoi_irq+0xc4/0x220 [ 67.848580] __handle_domain_irq+0x80/0xe0 [ 67.848583] gic_handle_irq+0xc0/0x138 [ 67.848585] 0x180 [67.848588] arch_cpu_idle+0x14/0x2c [67.848591] default_idle_call+0x40/0x16c [ 67.848594] do_idle+0x1f0/0x250 [ 67.848597] cpu_startup_entry+0x2c/0x60 [ 67.848600] rest_init+0xc0/0xcc [ 67.848603] arch_call_rest_init+0x14/0x1c [ 67.84860 6] start_kernel+0x4cc/0x500 [ 67.848610] C\\u00f3digo: eb0002ff 9a9f12d6 f2fbd5a2 f2fbd5a3 ( a94602c1) [67.848613] ---[ final de seguimiento 585a97036f88203a ]---\"}]",
      "id": "CVE-2023-52899",
      "lastModified": "2024-09-13T13:44:43.737",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 5.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 3.6}]}",
      "published": "2024-08-21T07:15:06.237",
      "references": "[{\"url\": \"https://git.kernel.org/stable/c/20d0a6d17e85a8a816a64fa7d7cae616f1617833\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/5054d001ffaf76155637c5e5b922c11016cd6a5d\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/51a7ad5b60efac65691729d10745c28fa1016b96\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/53dd833fd0a2d8f0118d01ea063a70652689d31e\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/57054fe516d59d03a7bcf1888e82479ccc244f87\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}, {\"url\": \"https://git.kernel.org/stable/c/f534dc438828cc3f1f8c6895b8bdfbef079521fb\", \"source\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"tags\": [\"Patch\"]}]",
      "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "vulnStatus": "Analyzed",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-476\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-52899\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-08-21T07:15:06.237\",\"lastModified\":\"2026-06-17T06:43:53.440\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nAdd exception protection processing for vd in axi_chan_handle_err function\\n\\nSince there is no protection for vd, a kernel panic will be\\ntriggered here in exceptional cases.\\n\\nYou can refer to the processing of axi_chan_block_xfer_complete function\\n\\nThe triggered kernel panic is as follows:\\n\\n[   67.848444] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000060\\n[   67.848447] Mem abort info:\\n[   67.848449]   ESR = 0x96000004\\n[   67.848451]   EC = 0x25: DABT (current EL), IL = 32 bits\\n[   67.848454]   SET = 0, FnV = 0\\n[   67.848456]   EA = 0, S1PTW = 0\\n[   67.848458] Data abort info:\\n[   67.848460]   ISV = 0, ISS = 0x00000004\\n[   67.848462]   CM = 0, WnR = 0\\n[   67.848465] user pgtable: 4k pages, 48-bit VAs, pgdp=00000800c4c0b000\\n[   67.848468] [0000000000000060] pgd=0000000000000000, p4d=0000000000000000\\n[   67.848472] Internal error: Oops: 96000004 [#1] SMP\\n[   67.848475] Modules linked in: dmatest\\n[   67.848479] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.10.100-emu_x2rc+ #11\\n[   67.848483] pstate: 62000085 (nZCv daIf -PAN -UAO +TCO BTYPE=--)\\n[   67.848487] pc : axi_chan_handle_err+0xc4/0x230\\n[   67.848491] lr : axi_chan_handle_err+0x30/0x230\\n[   67.848493] sp : ffff0803fe55ae50\\n[   67.848495] x29: ffff0803fe55ae50 x28: ffff800011212200\\n[   67.848500] x27: ffff0800c42c0080 x26: ffff0800c097c080\\n[   67.848504] x25: ffff800010d33880 x24: ffff80001139d850\\n[   67.848508] x23: ffff0800c097c168 x22: 0000000000000000\\n[   67.848512] x21: 0000000000000080 x20: 0000000000002000\\n[   67.848517] x19: ffff0800c097c080 x18: 0000000000000000\\n[   67.848521] x17: 0000000000000000 x16: 0000000000000000\\n[   67.848525] x15: 0000000000000000 x14: 0000000000000000\\n[   67.848529] x13: 0000000000000000 x12: 0000000000000040\\n[   67.848533] x11: ffff0800c0400248 x10: ffff0800c040024a\\n[   67.848538] x9 : ffff800010576cd4 x8 : ffff0800c0400270\\n[   67.848542] x7 : 0000000000000000 x6 : ffff0800c04003e0\\n[   67.848546] x5 : ffff0800c0400248 x4 : ffff0800c4294480\\n[   67.848550] x3 : dead000000000100 x2 : dead000000000122\\n[   67.848555] x1 : 0000000000000100 x0 : ffff0800c097c168\\n[   67.848559] Call trace:\\n[   67.848562]  axi_chan_handle_err+0xc4/0x230\\n[   67.848566]  dw_axi_dma_interrupt+0xf4/0x590\\n[   67.848569]  __handle_irq_event_percpu+0x60/0x220\\n[   67.848573]  handle_irq_event+0x64/0x120\\n[   67.848576]  handle_fasteoi_irq+0xc4/0x220\\n[   67.848580]  __handle_domain_irq+0x80/0xe0\\n[   67.848583]  gic_handle_irq+0xc0/0x138\\n[   67.848585]  el1_irq+0xc8/0x180\\n[   67.848588]  arch_cpu_idle+0x14/0x2c\\n[   67.848591]  default_idle_call+0x40/0x16c\\n[   67.848594]  do_idle+0x1f0/0x250\\n[   67.848597]  cpu_startup_entry+0x2c/0x60\\n[   67.848600]  rest_init+0xc0/0xcc\\n[   67.848603]  arch_call_rest_init+0x14/0x1c\\n[   67.848606]  start_kernel+0x4cc/0x500\\n[   67.848610] Code: eb0002ff 9a9f12d6 f2fbd5a2 f2fbd5a3 (a94602c1)\\n[   67.848613] ---[ end trace 585a97036f88203a ]---\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: Agregar procesamiento de protecci\u00f3n de excepci\u00f3n para vd en la funci\u00f3n axi_chan_handle_err Dado que no hay protecci\u00f3n para vd, aqu\u00ed se activar\u00e1 un p\u00e1nico del kernel en casos excepcionales. Puede consultar el procesamiento de la funci\u00f3n axi_chan_block_xfer_complete. El p\u00e1nico del kernel desencadenado es el siguiente: [67.848444] No se puede manejar la desreferencia del puntero NULL del kernel en la direcci\u00f3n virtual 0000000000000060 [67.848447] Informaci\u00f3n de cancelaci\u00f3n de memoria: [67.848449] ESR = 0x96000004 [67.8 48451] CE = 0x25 : DABT (EL actual), IL = 32 bits [ 67.848454] SET = 0, FnV = 0 [ 67.848456] EA = 0, S1PTW = 0 [ 67.848458] Informaci\u00f3n de cancelaci\u00f3n de datos: [ 67.848460] ISV = 0, ISS = 0x00000004 [ 67.848462 ] CM = 0, WnR = 0 [ 67.848465] tabla de p\u00e1ginas de usuario: p\u00e1ginas de 4k, VA de 48 bits, pgdp=00000800c4c0b000 [ 67.848468] [0000000000000060] pgd=0000000000000000, 000000000000 [67.848472] Error interno: Ups: 96000004 [#1 ] SMP [67.848475] M\u00f3dulos vinculados en: dmatest [67.848479] CPU: 0 PID: 0 Comm: swapper/0 No contaminado 5.10.100-emu_x2rc+ #11 [67.848483] pstate: 62000085 (nZCv daIf -PAN -UAO +TCO BTYPE= --) [67.848487] pc: axi_chan_handle_err+0xc4/0x230 [67.848491] lr: axi_chan_handle_err+0x30/0x230 [67.848493] sp: ffff0803fe55ae50 [67.848495] x29: fe55ae50 x28: ffff800011212200 [ 67.848500] x27: ffff0800c42c0080 x26: ffff0800c097c080 [ 67.848504] x25: ffff800010d33880 x24: ffff80001139d850 [ 67.848508] x23: ffff0800c097c168 x22: 0000000000000000 [ 67.848512] x21: 0000000000000080 x20: 0000000000002000 [ 67.848517] x19: ffff0800c097c080 x18: 0000000000000000 [ 67.848521] x17: 0000000000000000 x16: 0000000000000 000 [67.848525] x15: 0000000000000000 x14: 0000000000000000 [ 67.848529] x13: 0000000000000000 x12: 0000000000000040 [ 67.848533] x11: ffff0800c0400248 x10: ffff0800c040024a [ 67.848538] x9: ffff800010576cd4 x8: ffff0800c0400270 [67.848542] x7: 0000000000000000 x6: ffff0800c04003e0 [67.848546] x5: 8x4: ffff0800c4294480 [67.848550] x3 : dead000000000100 x2 : dead000000000122 [ 67.848555 ] x1 : 0000000000000100 x0 : ffff0800c097c168 [ 67.848559 ] Rastreo de llamadas: [ 67.848562] 0x230 [ 67.848566] dw_axi_dma_interrupt+0xf4/0x590 [ 67.848569] __handle_irq_event_percpu+0x60/0x220 [ 67.848573] handle_irq_event+0x64 /0x120 [ 67.848576] handle_fasteoi_irq+0xc4/0x220 [ 67.848580] __handle_domain_irq+0x80/0xe0 [ 67.848583] gic_handle_irq+0xc0/0x138 [ 67.848585] 0x180 [67.848588] arch_cpu_idle+0x14/0x2c [67.848591] default_idle_call+0x40/0x16c [ 67.848594] do_idle+0x1f0/0x250 [ 67.848597] cpu_startup_entry+0x2c/0x60 [ 67.848600] rest_init+0xc0/0xcc [ 67.848603] arch_call_rest_init+0x14/0x1c [ 67.84860 6] start_kernel+0x4cc/0x500 [ 67.848610] C\u00f3digo: eb0002ff 9a9f12d6 f2fbd5a2 f2fbd5a3 ( a94602c1) [67.848613] ---[ final de seguimiento 585a97036f88203a ]---\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/dma/dw-axi-dmac/dw-axi-dmac-platform.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"1fe20f1b84548bbcf48b6659ea171cd46618ea3a\",\"lessThan\":\"f534dc438828cc3f1f8c6895b8bdfbef079521fb\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"1fe20f1b84548bbcf48b6659ea171cd46618ea3a\",\"lessThan\":\"53dd833fd0a2d8f0118d01ea063a70652689d31e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"1fe20f1b84548bbcf48b6659ea171cd46618ea3a\",\"lessThan\":\"20d0a6d17e85a8a816a64fa7d7cae616f1617833\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"1fe20f1b84548bbcf48b6659ea171cd46618ea3a\",\"lessThan\":\"5054d001ffaf76155637c5e5b922c11016cd6a5d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"1fe20f1b84548bbcf48b6659ea171cd46618ea3a\",\"lessThan\":\"51a7ad5b60efac65691729d10745c28fa1016b96\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"1fe20f1b84548bbcf48b6659ea171cd46618ea3a\",\"lessThan\":\"57054fe516d59d03a7bcf1888e82479ccc244f87\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/dma/dw-axi-dmac/dw-axi-dmac-platform.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.17\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.17\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.271\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.230\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.165\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.90\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.8\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.2\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-09-10T16:03:34.135190Z\",\"id\":\"CVE-2023-52899\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-476\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.19.271\",\"matchCriteriaId\":\"96C6211C-C372-4AC3-90D8-2535A98604D7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.230\",\"matchCriteriaId\":\"9DB7398D-9781-49C5-B2AE-1969B694B614\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.165\",\"matchCriteriaId\":\"C6002D5B-9B6A-4788-B943-E3EE01E01303\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.90\",\"matchCriteriaId\":\"E995CDA5-7223-4FDB-BAD3-81B22C763A43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.8\",\"matchCriteriaId\":\"A6AFE6C9-3F59-4711-B2CF-7D6682FF6BD0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"FF501633-2F44-4913-A8EE-B021929F49F6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"2BDA597B-CAC1-4DF0-86F0-42E142C654E9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.2:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"725C78C9-12CE-406F-ABE8-0813A01D66E8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.2:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"A127C155-689C-4F67-B146-44A57F4BFD85\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/20d0a6d17e85a8a816a64fa7d7cae616f1617833\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/5054d001ffaf76155637c5e5b922c11016cd6a5d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/51a7ad5b60efac65691729d10745c28fa1016b96\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/53dd833fd0a2d8f0118d01ea063a70652689d31e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/57054fe516d59d03a7bcf1888e82479ccc244f87\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f534dc438828cc3f1f8c6895b8bdfbef079521fb\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2025-11-21T14:36:45+00:00",
      "cve": "CVE-2023-52899",
      "id": "CVE-2023-52899",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "198",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: Add exception protection processing for vd in axi_chan_handle_err function",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-52899.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-11T02:24:16Z",
      "cve": "CVE-2023-52899",
      "id": "CVE-2023-52899",
      "initial_release_date": "2024-08-22T03:14:40Z",
      "product_status:known_affected": "483",
      "product_status:known_not_affected": "212",
      "product_status:recommended": "288",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-52899",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-52899.json",
      "version": "46"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-52899\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-10T16:03:34.135190Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-11T12:42:19.162Z\"}}], \"cna\": {\"title\": \"Add exception protection processing for vd in axi_chan_handle_err function\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"1fe20f1b84548bbcf48b6659ea171cd46618ea3a\", \"lessThan\": \"f534dc438828cc3f1f8c6895b8bdfbef079521fb\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"1fe20f1b84548bbcf48b6659ea171cd46618ea3a\", \"lessThan\": \"53dd833fd0a2d8f0118d01ea063a70652689d31e\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"1fe20f1b84548bbcf48b6659ea171cd46618ea3a\", \"lessThan\": \"20d0a6d17e85a8a816a64fa7d7cae616f1617833\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"1fe20f1b84548bbcf48b6659ea171cd46618ea3a\", \"lessThan\": \"5054d001ffaf76155637c5e5b922c11016cd6a5d\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"1fe20f1b84548bbcf48b6659ea171cd46618ea3a\", \"lessThan\": \"51a7ad5b60efac65691729d10745c28fa1016b96\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"1fe20f1b84548bbcf48b6659ea171cd46618ea3a\", \"lessThan\": \"57054fe516d59d03a7bcf1888e82479ccc244f87\", \"versionType\": \"git\"}], \"programFiles\": [\"drivers/dma/dw-axi-dmac/dw-axi-dmac-platform.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.17\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"4.17\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.19.271\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.230\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.165\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.90\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.8\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.2\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"drivers/dma/dw-axi-dmac/dw-axi-dmac-platform.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/f534dc438828cc3f1f8c6895b8bdfbef079521fb\"}, {\"url\": \"https://git.kernel.org/stable/c/53dd833fd0a2d8f0118d01ea063a70652689d31e\"}, {\"url\": \"https://git.kernel.org/stable/c/20d0a6d17e85a8a816a64fa7d7cae616f1617833\"}, {\"url\": \"https://git.kernel.org/stable/c/5054d001ffaf76155637c5e5b922c11016cd6a5d\"}, {\"url\": \"https://git.kernel.org/stable/c/51a7ad5b60efac65691729d10745c28fa1016b96\"}, {\"url\": \"https://git.kernel.org/stable/c/57054fe516d59d03a7bcf1888e82479ccc244f87\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nAdd exception protection processing for vd in axi_chan_handle_err function\\n\\nSince there is no protection for vd, a kernel panic will be\\ntriggered here in exceptional cases.\\n\\nYou can refer to the processing of axi_chan_block_xfer_complete function\\n\\nThe triggered kernel panic is as follows:\\n\\n[   67.848444] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000060\\n[   67.848447] Mem abort info:\\n[   67.848449]   ESR = 0x96000004\\n[   67.848451]   EC = 0x25: DABT (current EL), IL = 32 bits\\n[   67.848454]   SET = 0, FnV = 0\\n[   67.848456]   EA = 0, S1PTW = 0\\n[   67.848458] Data abort info:\\n[   67.848460]   ISV = 0, ISS = 0x00000004\\n[   67.848462]   CM = 0, WnR = 0\\n[   67.848465] user pgtable: 4k pages, 48-bit VAs, pgdp=00000800c4c0b000\\n[   67.848468] [0000000000000060] pgd=0000000000000000, p4d=0000000000000000\\n[   67.848472] Internal error: Oops: 96000004 [#1] SMP\\n[   67.848475] Modules linked in: dmatest\\n[   67.848479] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.10.100-emu_x2rc+ #11\\n[   67.848483] pstate: 62000085 (nZCv daIf -PAN -UAO +TCO BTYPE=--)\\n[   67.848487] pc : axi_chan_handle_err+0xc4/0x230\\n[   67.848491] lr : axi_chan_handle_err+0x30/0x230\\n[   67.848493] sp : ffff0803fe55ae50\\n[   67.848495] x29: ffff0803fe55ae50 x28: ffff800011212200\\n[   67.848500] x27: ffff0800c42c0080 x26: ffff0800c097c080\\n[   67.848504] x25: ffff800010d33880 x24: ffff80001139d850\\n[   67.848508] x23: ffff0800c097c168 x22: 0000000000000000\\n[   67.848512] x21: 0000000000000080 x20: 0000000000002000\\n[   67.848517] x19: ffff0800c097c080 x18: 0000000000000000\\n[   67.848521] x17: 0000000000000000 x16: 0000000000000000\\n[   67.848525] x15: 0000000000000000 x14: 0000000000000000\\n[   67.848529] x13: 0000000000000000 x12: 0000000000000040\\n[   67.848533] x11: ffff0800c0400248 x10: ffff0800c040024a\\n[   67.848538] x9 : ffff800010576cd4 x8 : ffff0800c0400270\\n[   67.848542] x7 : 0000000000000000 x6 : ffff0800c04003e0\\n[   67.848546] x5 : ffff0800c0400248 x4 : ffff0800c4294480\\n[   67.848550] x3 : dead000000000100 x2 : dead000000000122\\n[   67.848555] x1 : 0000000000000100 x0 : ffff0800c097c168\\n[   67.848559] Call trace:\\n[   67.848562]  axi_chan_handle_err+0xc4/0x230\\n[   67.848566]  dw_axi_dma_interrupt+0xf4/0x590\\n[   67.848569]  __handle_irq_event_percpu+0x60/0x220\\n[   67.848573]  handle_irq_event+0x64/0x120\\n[   67.848576]  handle_fasteoi_irq+0xc4/0x220\\n[   67.848580]  __handle_domain_irq+0x80/0xe0\\n[   67.848583]  gic_handle_irq+0xc0/0x138\\n[   67.848585]  el1_irq+0xc8/0x180\\n[   67.848588]  arch_cpu_idle+0x14/0x2c\\n[   67.848591]  default_idle_call+0x40/0x16c\\n[   67.848594]  do_idle+0x1f0/0x250\\n[   67.848597]  cpu_startup_entry+0x2c/0x60\\n[   67.848600]  rest_init+0xc0/0xcc\\n[   67.848603]  arch_call_rest_init+0x14/0x1c\\n[   67.848606]  start_kernel+0x4cc/0x500\\n[   67.848610] Code: eb0002ff 9a9f12d6 f2fbd5a2 f2fbd5a3 (a94602c1)\\n[   67.848613] ---[ end trace 585a97036f88203a ]---\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.271\", \"versionStartIncluding\": \"4.17\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.230\", \"versionStartIncluding\": \"4.17\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.165\", \"versionStartIncluding\": \"4.17\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.90\", \"versionStartIncluding\": \"4.17\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.8\", \"versionStartIncluding\": \"4.17\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.2\", \"versionStartIncluding\": \"4.17\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2025-05-21T08:50:01.288Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2023-52899\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-05-21T08:50:01.288Z\", \"dateReserved\": \"2024-08-21T06:07:11.014Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-08-21T06:10:39.438Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.