Go to homepageCyberStrike

Menu

Star on GitHub · 3.2k
Sign inDownload

CVE-2023-52835

7.8 · HIGH

In the Linux kernel, the following vulnerability has been resolved: perf/core: Bail out early if the request AUX area is out of bound When perf-record with a large AUX area, e.g 4GB, it fails wit…

Published May 21, 2024CWE-129EPSS 0.25%

Overview

CVE-2023-52835 is a high-severity vulnerability. It was published on May 21, 2024 and has a CVSS 3.1 base score of 7.8 (HIGH).

This vulnerability has a CVSS 3.1 base score of 7.8, rated HIGH. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical description

In the Linux kernel, the following vulnerability has been resolved:

perf/core: Bail out early if the request AUX area is out of bound

When perf-record with a large AUX area, e.g 4GB, it fails with:

#perf record -C 0 -m ,4G -e arm_spe_0// -- sleep 1

failed to mmap with 12 (Cannot allocate memory)

and it reveals a WARNING with __alloc_pages():

------------[ cut here ]------------

WARNING: CPU: 44 PID: 17573 at mm/page_alloc.c:5568 __alloc_pages+0x1ec/0x248

Call trace:

__alloc_pages+0x1ec/0x248

__kmalloc_large_node+0xc0/0x1f8

__kmalloc_node+0x134/0x1e8

rb_alloc_aux+0xe0/0x298

perf_mmap+0x440/0x660

mmap_region+0x308/0x8a8

do_mmap+0x3c0/0x528

vm_mmap_pgoff+0xf4/0x1b8

ksys_mmap_pgoff+0x18c/0x218

__arm64_sys_mmap+0x38/0x58

invoke_syscall+0x50/0x128

el0_svc_common.constprop.0+0x58/0x188

do_el0_svc+0x34/0x50

el0_svc+0x34/0x108

el0t_64_sync_handler+0xb8/0xc0

el0t_64_sync+0x1a4/0x1a8

'rb->aux_pages' allocated by kcalloc() is a pointer array which i

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References

Refgit.kernel.org/stable/c/1a2a4202c60fcdffbf04f259002ce9bff39edeceRefgit.kernel.org/stable/c/2424410f94a94d91230ced094062d859714c984aRefgit.kernel.org/stable/c/2e905e608e38cf7f8dcddcf8a6036e91a78444cbRefgit.kernel.org/stable/c/54aee5f15b83437f23b2b2469bcf21bdd9823916Refgit.kernel.org/stable/c/788c0b3442ead737008934947730a6d1ff703734Refgit.kernel.org/stable/c/8c504f615d7ed60ae035c51d0c789137ced6797fRefgit.kernel.org/stable/c/9ce4e87a8efd37c85766ec08b15e885cab08553aRefgit.kernel.org/stable/c/fd0df3f8719201dbe61a4d39083d5aecd705399aRefgit.kernel.org/stable/c/1a2a4202c60fcdffbf04f259002ce9bff39edeceRefgit.kernel.org/stable/c/2424410f94a94d91230ced094062d859714c984a

How CyberStrike helps

Frequently asked questions

What is CVE-2023-52835?

CVE-2023-52835 is a high-severity vulnerability. It was published on May 21, 2024 and has a CVSS 3.1 base score of 7.8 (HIGH).

How severe is CVE-2023-52835?

This vulnerability has a CVSS 3.1 base score of 7.8, rated HIGH. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2023-52835?

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2023-52835?

CyberStrike is an open-source, AI-augmented pentesting engine. Rather than flag a version number, it tests whether an issue like CVE-2023-52835 is actually reachable in your own applications and APIs, then verifies each finding before reporting it. That tells you if the weakness is a real, exploitable risk in your environment or a false positive you can safely deprioritize.

Related HIGH CVEs from 2023

View all
Browse by year2026202520242023202220212020201920182017201620152014201320122011201020092008200720062005200420032002200120001999