CVE-2023-52452

Public on 2024-02-22
Modified on 2025-08-06
Description
bpf: Fix accesses to uninit stack slots

Privileged programs are supposed to be able to read uninitialized stack
memory (ever since 6715df8d5) but, before this patch, these accesses
were permitted inconsistently. In particular, accesses were permitted
above state->allocated_stack, but not below it. In other words, if the
stack was already "large enough", the access was permitted, but
otherwise the access was rejected instead of being allowed to "grow the
stack".
Severity
Medium severity
Medium
See what this means
CVSS v3 Base Score
4.7
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 1 kernel No Fix Planned
Amazon Linux 2 - Core kernel No Fix Planned
Amazon Linux 2 - Kernel-5.10 Extra kernel No Fix Planned
Amazon Linux 2 - Kernel-5.15 Extra kernel No Fix Planned
Amazon Linux 2 - Kernel-5.4 Extra kernel No Fix Planned
Amazon Linux 2023 kernel No Fix Planned

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H