CVE-2023-53205

We do check for target CPU == -1, but this might change at the time we are going to use it. Hold the physical target CPU in a local variable to avoid out-of-bound accesses to the cpu arrays.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53205.json",
    "cna_assigner": "Linux"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

87e28a15c42cc592009c32a8c20e5789059027c2

Fixed

a9ccf140a2a03a0ae82be4bdfbdd17bdaea72ff5

Fixed

86bfb18bad60fc468e5f112cbbd918462a8dd435

Fixed

dc7e0192c470a53d847c79a2796f9ac429477a26

Fixed

0bc380beb78aa352eadbc21d934dd9606fcee808

Affected versions

v5.*

v5.12

v5.12-rc3

v5.12-rc4

v5.12-rc5

v5.12-rc6

v5.12-rc7

v5.12-rc8

v5.13

v5.13-rc1

v5.13-rc2

v5.13-rc3

v5.13-rc4

v5.13-rc5

v5.13-rc6

v5.13-rc7

v5.14

v5.14-rc1

v5.14-rc2

v5.14-rc3

v5.14-rc4

v5.14-rc5

v5.14-rc6

v5.14-rc7

v5.15

v5.15-rc1

v5.15-rc2

v5.15-rc3

v5.15-rc4

v5.15-rc5

v5.15-rc6

v5.15-rc7

v5.15.1

v5.15.10

v5.15.100

v5.15.101

v5.15.102

v5.15.103

v5.15.104

v5.15.105

v5.15.106

v5.15.107

v5.15.108

v5.15.109

v5.15.11

v5.15.110

v5.15.111

v5.15.112

v5.15.113

v5.15.114

v5.15.115

v5.15.116

v5.15.117

v5.15.118

v5.15.119

v5.15.12

v5.15.120

v5.15.13

v5.15.14

v5.15.15

v5.15.16

v5.15.17

v5.15.18

v5.15.19

v5.15.2

v5.15.20

v5.15.21

v5.15.22

v5.15.23

v5.15.24

v5.15.25

v5.15.26

v5.15.27

v5.15.28

v5.15.29

v5.15.3

v5.15.30

v5.15.31

v5.15.32

v5.15.33

v5.15.34

v5.15.35

v5.15.36

v5.15.37

v5.15.38

v5.15.39

v5.15.4

v5.15.40

v5.15.41

v5.15.42

v5.15.43

v5.15.44

v5.15.45

v5.15.46

v5.15.47

v5.15.48

v5.15.49

v5.15.5

v5.15.50

v5.15.51

v5.15.52

v5.15.53

v5.15.54

v5.15.55

v5.15.56

v5.15.57

v5.15.58

v5.15.59

v5.15.6

v5.15.60

v5.15.61

v5.15.62

v5.15.63

v5.15.64

v5.15.65

v5.15.66

v5.15.67

v5.15.68

v5.15.69

v5.15.7

v5.15.70

v5.15.71

v5.15.72

v5.15.73

v5.15.74

v5.15.75

v5.15.76

v5.15.77

v5.15.78

v5.15.79

v5.15.8

v5.15.80

v5.15.81

v5.15.82

v5.15.83

v5.15.84

v5.15.85

v5.15.86

v5.15.87

v5.15.88

v5.15.89

v5.15.9

v5.15.90

v5.15.91

v5.15.92

v5.15.93

v5.15.94

v5.15.95

v5.15.96

v5.15.97

v5.15.98

v5.15.99

v5.16

v5.16-rc1

v5.16-rc2

v5.16-rc3

v5.16-rc4

v5.16-rc5

v5.16-rc6

v5.16-rc7

v5.16-rc8

v5.17

v5.17-rc1

v5.17-rc2

v5.17-rc3

v5.17-rc4

v5.17-rc5

v5.17-rc6

v5.17-rc7

v5.17-rc8

v5.18

v5.18-rc1

v5.18-rc2

v5.18-rc3

v5.18-rc4

v5.18-rc5

v5.18-rc6

v5.18-rc7

v5.19

v5.19-rc1

v5.19-rc2

v5.19-rc3

v5.19-rc4

v5.19-rc5

v5.19-rc6

v5.19-rc7

v5.19-rc8

v6.*

v6.0

v6.0-rc1

v6.0-rc2

v6.0-rc3

v6.0-rc4

v6.0-rc5

v6.0-rc6

v6.0-rc7

v6.1

v6.1-rc1

v6.1-rc2

v6.1-rc3

v6.1-rc4

v6.1-rc5

v6.1-rc6

v6.1-rc7

v6.1-rc8

v6.1.1

v6.1.10

v6.1.11

v6.1.12

v6.1.13

v6.1.14

v6.1.15

v6.1.16

v6.1.17

v6.1.18

v6.1.19

v6.1.2

v6.1.20

v6.1.21

v6.1.22

v6.1.23

v6.1.24

v6.1.25

v6.1.26

v6.1.27

v6.1.28

v6.1.29

v6.1.3

v6.1.30

v6.1.31

v6.1.32

v6.1.33

v6.1.34

v6.1.35

v6.1.36

v6.1.37

v6.1.38

v6.1.4

v6.1.5

v6.1.6

v6.1.7

v6.1.8

v6.1.9

v6.2

v6.2-rc1

v6.2-rc2

v6.2-rc3

v6.2-rc4

v6.2-rc5

v6.2-rc6

v6.2-rc7

v6.2-rc8

v6.3

v6.3-rc1

v6.3-rc2

v6.3-rc3

v6.3-rc4

v6.3-rc5

v6.3-rc6

v6.3-rc7

v6.4

v6.4-rc1

v6.4-rc2

v6.4-rc3

v6.4-rc4

v6.4-rc5

v6.4-rc6

v6.4-rc7

v6.4.1

v6.4.2

v6.4.3

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53205.json"

vanir_signatures

[
    {
        "target": {
            "file": "arch/s390/kvm/diag.c"
        },
        "digest": {
            "line_hashes": [
                "40895643546851796321472317572819607626",
                "90221185251825903586892848896837342979",
                "81881294508838859390094945366779147902",
                "290849575073180236548685940903994425101",
                "45962620953650691265038045170978612955",
                "290773450668200456354818213749000238168",
                "262411194209895761941814907146349520668",
                "47020779011116696552376392262396906729",
                "327898761146386071306689610469758429256",
                "130114887335844684209461690534472901720",
                "325339090689244864969342250365459757529",
                "169565841580193679966040976942368339692",
                "120705064696155170603930190338195075404"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "id": "CVE-2023-53205-0f10f999",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@86bfb18bad60fc468e5f112cbbd918462a8dd435",
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "target": {
            "file": "arch/s390/kvm/diag.c",
            "function": "__diag_time_slice_end_directed"
        },
        "digest": {
            "length": 905.0,
            "function_hash": "150019057763516446064507019226876062570"
        },
        "signature_type": "Function",
        "id": "CVE-2023-53205-21579e69",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0bc380beb78aa352eadbc21d934dd9606fcee808",
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "target": {
            "file": "arch/s390/kvm/diag.c"
        },
        "digest": {
            "line_hashes": [
                "40895643546851796321472317572819607626",
                "90221185251825903586892848896837342979",
                "81881294508838859390094945366779147902",
                "290849575073180236548685940903994425101",
                "45962620953650691265038045170978612955",
                "290773450668200456354818213749000238168",
                "262411194209895761941814907146349520668",
                "47020779011116696552376392262396906729",
                "327898761146386071306689610469758429256",
                "130114887335844684209461690534472901720",
                "325339090689244864969342250365459757529",
                "169565841580193679966040976942368339692",
                "120705064696155170603930190338195075404"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "id": "CVE-2023-53205-59f1b615",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dc7e0192c470a53d847c79a2796f9ac429477a26",
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "target": {
            "file": "arch/s390/kvm/diag.c",
            "function": "__diag_time_slice_end_directed"
        },
        "digest": {
            "length": 905.0,
            "function_hash": "150019057763516446064507019226876062570"
        },
        "signature_type": "Function",
        "id": "CVE-2023-53205-73779f7b",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dc7e0192c470a53d847c79a2796f9ac429477a26",
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "target": {
            "file": "arch/s390/kvm/diag.c",
            "function": "__diag_time_slice_end_directed"
        },
        "digest": {
            "length": 905.0,
            "function_hash": "150019057763516446064507019226876062570"
        },
        "signature_type": "Function",
        "id": "CVE-2023-53205-77c833a2",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a9ccf140a2a03a0ae82be4bdfbdd17bdaea72ff5",
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "target": {
            "file": "arch/s390/kvm/diag.c"
        },
        "digest": {
            "line_hashes": [
                "40895643546851796321472317572819607626",
                "90221185251825903586892848896837342979",
                "81881294508838859390094945366779147902",
                "290849575073180236548685940903994425101",
                "45962620953650691265038045170978612955",
                "290773450668200456354818213749000238168",
                "262411194209895761941814907146349520668",
                "47020779011116696552376392262396906729",
                "327898761146386071306689610469758429256",
                "130114887335844684209461690534472901720",
                "325339090689244864969342250365459757529",
                "169565841580193679966040976942368339692",
                "120705064696155170603930190338195075404"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "id": "CVE-2023-53205-81128a11",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a9ccf140a2a03a0ae82be4bdfbdd17bdaea72ff5",
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "target": {
            "file": "arch/s390/kvm/diag.c",
            "function": "__diag_time_slice_end_directed"
        },
        "digest": {
            "length": 905.0,
            "function_hash": "150019057763516446064507019226876062570"
        },
        "signature_type": "Function",
        "id": "CVE-2023-53205-e985fd08",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@86bfb18bad60fc468e5f112cbbd918462a8dd435",
        "deprecated": false,
        "signature_version": "v1"
    },
    {
        "target": {
            "file": "arch/s390/kvm/diag.c"
        },
        "digest": {
            "line_hashes": [
                "40895643546851796321472317572819607626",
                "90221185251825903586892848896837342979",
                "81881294508838859390094945366779147902",
                "290849575073180236548685940903994425101",
                "45962620953650691265038045170978612955",
                "290773450668200456354818213749000238168",
                "262411194209895761941814907146349520668",
                "47020779011116696552376392262396906729",
                "327898761146386071306689610469758429256",
                "130114887335844684209461690534472901720",
                "325339090689244864969342250365459757529",
                "169565841580193679966040976942368339692",
                "120705064696155170603930190338195075404"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "id": "CVE-2023-53205-f80a1da3",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0bc380beb78aa352eadbc21d934dd9606fcee808",
        "deprecated": false,
        "signature_version": "v1"
    }
]

Git / github.com/gregkh/linux