CVE-2023-52506
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Mar 2, 2024
Updated: Jan 13, 2025
CWE ID 476
Summary
CVE-2023-52506 is a vulnerability affecting the Linux kernel on LoongArch processors. The issue was caused by a change in commit 611167ad5fecdea, which set all reserved memblocks on Node#0 at initialization. This led to a panic if DEFERRED_STRUCT_PAGE_INIT was enabled, as the subsequent calls to reserve memory regions operated on the incorrect node. This vulnerability can be mitigated by setting all reserved memblocks on Node#0 during initialization to avoid NULL dereferences and subsequent panics.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.