In the Linux kernel, the following vulnerability has been resolved:
cacheinfo: Fix sharedcpumap to handle shared caches at different levels
The cacheinfo sets up the sharedcpumap by checking whether the caches with the same index are shared between CPUs. However, this will trigger slab-out-of-bounds access if the CPUs do not have the same cache hierarchy. Another problem is the mismatched sharedcpumap when the shared cache does not have the same index between CPUs.
CPU0 I D L3 index 0 1 2 x ^ ^ ^ ^ index 0 1 2 3 CPU1 I D L2 L3
This patch checks each cache is shared with all caches on other CPUs.
[ { "deprecated": false, "target": { "file": "drivers/base/cacheinfo.c" }, "signature_type": "Line", "id": "CVE-2023-53254-2d949b61", "digest": { "line_hashes": [ "123822103324465667191676369152510211700", "332009357825165049840740445378956921441", "255636322900952420222072477367207730585", "244007695606487080634034544260433854080", "245017939002003849688337658646728170327", "167710324549022987400657568309186877436", "106302022437244038365791506657449202902", "187632026282387668618153330905269804241", "161101070766876566357386574326860435932", "14773783307987722002540572865300621855", "65407249695837556572871979959625766121", "63767583001948488459465743475433730465", "114770399544876324296204004193421883246", "163303110130809468195083620326213770339", "108006025978250856663786142009647818515", "146581201518080045940100478742878084194", "31898247061743057773158100615775384829", "8059100123349095319816958964945684835", "112756477906301750477312351404998201818", "125751331997608282308512966789634481506", "195381703700080529501056604507300362048" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dea49f2993f57d8a2df2cacb0bf649ef49b28879", "signature_version": "v1" }, { "deprecated": false, "target": { "file": "drivers/base/cacheinfo.c" }, "signature_type": "Line", "id": "CVE-2023-53254-40d45d05", "digest": { "line_hashes": [ "123822103324465667191676369152510211700", "332009357825165049840740445378956921441", "255636322900952420222072477367207730585", "244007695606487080634034544260433854080", "245017939002003849688337658646728170327", "167710324549022987400657568309186877436", "106302022437244038365791506657449202902", "187632026282387668618153330905269804241", "161101070766876566357386574326860435932", "14773783307987722002540572865300621855", "65407249695837556572871979959625766121", "63767583001948488459465743475433730465", "114770399544876324296204004193421883246", "163303110130809468195083620326213770339", "108006025978250856663786142009647818515", "146581201518080045940100478742878084194", "31898247061743057773158100615775384829", "8059100123349095319816958964945684835", "112756477906301750477312351404998201818", "125751331997608282308512966789634481506", "195381703700080529501056604507300362048" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@198102c9103fc78d8478495971947af77edb05c1", "signature_version": "v1" }, { "deprecated": false, "target": { "file": "drivers/base/cacheinfo.c", "function": "cache_shared_cpu_map_setup" }, "signature_type": "Function", "id": "CVE-2023-53254-48cb7824", "digest": { "length": 818.0, "function_hash": "106186229140771622606989145947954648941" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f588d0345d69a35e451077afed428fd057a5e34", "signature_version": "v1" }, { "deprecated": false, "target": { "file": "drivers/base/cacheinfo.c", "function": "cache_shared_cpu_map_remove" }, "signature_type": "Function", "id": "CVE-2023-53254-4eede339", "digest": { "length": 448.0, "function_hash": "143663511733196895508408131856280496581" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dea49f2993f57d8a2df2cacb0bf649ef49b28879", "signature_version": "v1" }, { "deprecated": false, "target": { "file": "drivers/base/cacheinfo.c" }, "signature_type": "Line", "id": "CVE-2023-53254-5b5ec294", "digest": { "line_hashes": [ "123822103324465667191676369152510211700", "332009357825165049840740445378956921441", "255636322900952420222072477367207730585", "244007695606487080634034544260433854080", "245017939002003849688337658646728170327", "167710324549022987400657568309186877436", "106302022437244038365791506657449202902", "187632026282387668618153330905269804241", "161101070766876566357386574326860435932", "14773783307987722002540572865300621855", "65407249695837556572871979959625766121", "63767583001948488459465743475433730465", "114770399544876324296204004193421883246", "163303110130809468195083620326213770339", "108006025978250856663786142009647818515", "146581201518080045940100478742878084194", "31898247061743057773158100615775384829", "8059100123349095319816958964945684835", "112756477906301750477312351404998201818", "95716545665999494797436387670839459969", "62226660837319605416046183876918620045" ], "threshold": 0.9 }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f588d0345d69a35e451077afed428fd057a5e34", "signature_version": "v1" }, { "deprecated": false, "target": { "file": "drivers/base/cacheinfo.c", "function": "cache_shared_cpu_map_setup" }, "signature_type": "Function", "id": "CVE-2023-53254-62dc1daa", "digest": { "length": 818.0, "function_hash": "106186229140771622606989145947954648941" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dea49f2993f57d8a2df2cacb0bf649ef49b28879", "signature_version": "v1" }, { "deprecated": false, "target": { "file": "drivers/base/cacheinfo.c", "function": "cache_shared_cpu_map_remove" }, "signature_type": "Function", "id": "CVE-2023-53254-bb8a2b57", "digest": { "length": 448.0, "function_hash": "143663511733196895508408131856280496581" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@198102c9103fc78d8478495971947af77edb05c1", "signature_version": "v1" }, { "deprecated": false, "target": { "file": "drivers/base/cacheinfo.c", "function": "cache_shared_cpu_map_setup" }, "signature_type": "Function", "id": "CVE-2023-53254-e7a58c3a", "digest": { "length": 818.0, "function_hash": "106186229140771622606989145947954648941" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@198102c9103fc78d8478495971947af77edb05c1", "signature_version": "v1" }, { "deprecated": false, "target": { "file": "drivers/base/cacheinfo.c", "function": "cache_shared_cpu_map_remove" }, "signature_type": "Function", "id": "CVE-2023-53254-f3eef9b7", "digest": { "length": 499.0, "function_hash": "97927191830771781608933699117756026468" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f588d0345d69a35e451077afed428fd057a5e34", "signature_version": "v1" } ]