In the Linux kernel, the following vulnerability has been resolved:
cacheinfo: Fix sharedcpumap to handle shared caches at different levels
The cacheinfo sets up the sharedcpumap by checking whether the caches with the same index are shared between CPUs. However, this will trigger slab-out-of-bounds access if the CPUs do not have the same cache hierarchy. Another problem is the mismatched sharedcpumap when the shared cache does not have the same index between CPUs.
CPU0 I D L3 index 0 1 2 x ^ ^ ^ ^ index 0 1 2 3 CPU1 I D L2 L3
This patch checks each cache is shared with all caches on other CPUs.
[
{
"id": "CVE-2023-53254-2d949b61",
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "drivers/base/cacheinfo.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dea49f2993f57d8a2df2cacb0bf649ef49b28879",
"digest": {
"line_hashes": [
"123822103324465667191676369152510211700",
"332009357825165049840740445378956921441",
"255636322900952420222072477367207730585",
"244007695606487080634034544260433854080",
"245017939002003849688337658646728170327",
"167710324549022987400657568309186877436",
"106302022437244038365791506657449202902",
"187632026282387668618153330905269804241",
"161101070766876566357386574326860435932",
"14773783307987722002540572865300621855",
"65407249695837556572871979959625766121",
"63767583001948488459465743475433730465",
"114770399544876324296204004193421883246",
"163303110130809468195083620326213770339",
"108006025978250856663786142009647818515",
"146581201518080045940100478742878084194",
"31898247061743057773158100615775384829",
"8059100123349095319816958964945684835",
"112756477906301750477312351404998201818",
"125751331997608282308512966789634481506",
"195381703700080529501056604507300362048"
],
"threshold": 0.9
},
"signature_version": "v1"
},
{
"id": "CVE-2023-53254-40d45d05",
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "drivers/base/cacheinfo.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@198102c9103fc78d8478495971947af77edb05c1",
"digest": {
"line_hashes": [
"123822103324465667191676369152510211700",
"332009357825165049840740445378956921441",
"255636322900952420222072477367207730585",
"244007695606487080634034544260433854080",
"245017939002003849688337658646728170327",
"167710324549022987400657568309186877436",
"106302022437244038365791506657449202902",
"187632026282387668618153330905269804241",
"161101070766876566357386574326860435932",
"14773783307987722002540572865300621855",
"65407249695837556572871979959625766121",
"63767583001948488459465743475433730465",
"114770399544876324296204004193421883246",
"163303110130809468195083620326213770339",
"108006025978250856663786142009647818515",
"146581201518080045940100478742878084194",
"31898247061743057773158100615775384829",
"8059100123349095319816958964945684835",
"112756477906301750477312351404998201818",
"125751331997608282308512966789634481506",
"195381703700080529501056604507300362048"
],
"threshold": 0.9
},
"signature_version": "v1"
},
{
"id": "CVE-2023-53254-48cb7824",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "drivers/base/cacheinfo.c",
"function": "cache_shared_cpu_map_setup"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f588d0345d69a35e451077afed428fd057a5e34",
"digest": {
"length": 818.0,
"function_hash": "106186229140771622606989145947954648941"
},
"signature_version": "v1"
},
{
"id": "CVE-2023-53254-4eede339",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "drivers/base/cacheinfo.c",
"function": "cache_shared_cpu_map_remove"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dea49f2993f57d8a2df2cacb0bf649ef49b28879",
"digest": {
"length": 448.0,
"function_hash": "143663511733196895508408131856280496581"
},
"signature_version": "v1"
},
{
"id": "CVE-2023-53254-5b5ec294",
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "drivers/base/cacheinfo.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f588d0345d69a35e451077afed428fd057a5e34",
"digest": {
"line_hashes": [
"123822103324465667191676369152510211700",
"332009357825165049840740445378956921441",
"255636322900952420222072477367207730585",
"244007695606487080634034544260433854080",
"245017939002003849688337658646728170327",
"167710324549022987400657568309186877436",
"106302022437244038365791506657449202902",
"187632026282387668618153330905269804241",
"161101070766876566357386574326860435932",
"14773783307987722002540572865300621855",
"65407249695837556572871979959625766121",
"63767583001948488459465743475433730465",
"114770399544876324296204004193421883246",
"163303110130809468195083620326213770339",
"108006025978250856663786142009647818515",
"146581201518080045940100478742878084194",
"31898247061743057773158100615775384829",
"8059100123349095319816958964945684835",
"112756477906301750477312351404998201818",
"95716545665999494797436387670839459969",
"62226660837319605416046183876918620045"
],
"threshold": 0.9
},
"signature_version": "v1"
},
{
"id": "CVE-2023-53254-62dc1daa",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "drivers/base/cacheinfo.c",
"function": "cache_shared_cpu_map_setup"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dea49f2993f57d8a2df2cacb0bf649ef49b28879",
"digest": {
"length": 818.0,
"function_hash": "106186229140771622606989145947954648941"
},
"signature_version": "v1"
},
{
"id": "CVE-2023-53254-bb8a2b57",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "drivers/base/cacheinfo.c",
"function": "cache_shared_cpu_map_remove"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@198102c9103fc78d8478495971947af77edb05c1",
"digest": {
"length": 448.0,
"function_hash": "143663511733196895508408131856280496581"
},
"signature_version": "v1"
},
{
"id": "CVE-2023-53254-e7a58c3a",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "drivers/base/cacheinfo.c",
"function": "cache_shared_cpu_map_setup"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@198102c9103fc78d8478495971947af77edb05c1",
"digest": {
"length": 818.0,
"function_hash": "106186229140771622606989145947954648941"
},
"signature_version": "v1"
},
{
"id": "CVE-2023-53254-f3eef9b7",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "drivers/base/cacheinfo.c",
"function": "cache_shared_cpu_map_remove"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2f588d0345d69a35e451077afed428fd057a5e34",
"digest": {
"length": 499.0,
"function_hash": "97927191830771781608933699117756026468"
},
"signature_version": "v1"
}
]