linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid memory allocation in iommu_sus...
CVE-2023-52559 is fixed in 21 products on 1 platform, first by ALAS2023-2023-422, released October 30, 2023. It is not reported as exploited. Patch Radar priority: Routine.
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid memory allocation in iommu_suspend() The iommu_suspend() syscore suspend callback is invoked with IRQ disabled. Allocating memory with the GFP_KERNEL flag may re-enable IRQs during the suspend callback, which can cause intermittent suspend/hibernation problems with the following kernel traces: Calling iommu_suspend+0x0/0x1d0 ------------[ cut here ]------------ WARNING: CPU: 0 PID: 15 at kernel/time/timekeeping.c:868 ktime_get+0x9b/0xb0 ... CPU: 0 PID: 15 Comm: rcu_preempt Tainted: G U E 6.3-intel #r1 RIP: 0010:ktime_get+0x9b/0xb0 ... Call Trace: <IRQ> tick_sched_timer+0x22/0x90 ? __pfx_tick_sched_timer+0x10/0x10 __hrtimer_run_queues+0x111/0x2b0 hrtimer_interrupt+0xfa/0x230 __sysvec_apic_timer_interrupt+0x63/0x140 sysvec_apic_timer_interrupt+0x7b/0xa0 </IRQ> <TASK> asm_sysvec_apic_timer_interrupt+0x1f/0x30 ... ------------[ cut here ]------------ Interrupts enabled after iommu_suspend+0x0/0x1d0 WARNING: CPU: 0 PID: 27420 at drivers/base/syscore.c:68 syscore_suspend+0x147/0x270 CPU: 0 PID: 27420 Comm: rtcwake Tainted: G U W E 6.3-intel #r1 RIP: 0010:syscore_suspend+0x147/0x270 ... Call Trace: <TASK> hibernation_snapshot+0x25b/0x670 hibernate+0xcd/0x390 state_store+0xcf/0xe0 kobj_attr_store+0x13/0x30 sysfs_kf_write+0x3f/0x50 kernfs_fop_write_iter+0x128/0x200 vfs_write+0x1fd/0x3c0 ksys_write+0x6f/0xf0 __x64_sys_write+0x1d/0x30 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x72/0xdc Given that only 4 words memory is needed, avoid the memory allocation in iommu_suspend().
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| bpftool · amzn 2023 | 6.1.59-84.139.amzn2023 | ALAS2023-2023-422 | Oct 30, 2023 |
| bpftool-debuginfo · amzn 2023 | 6.1.59-84.139.amzn2023 | ALAS2023-2023-422 | Oct 30, 2023 |
| kernel · amzn 2023 | 6.1.59-84.139.amzn2023 | ALAS2023-2023-422 | Oct 30, 2023 |
| kernel-debuginfo · amzn 2023 | 6.1.59-84.139.amzn2023 | ALAS2023-2023-422 | Oct 30, 2023 |
| kernel-debuginfo-common-aarch64 · amzn 2023 | 6.1.59-84.139.amzn2023 | ALAS2023-2023-422 | Oct 30, 2023 |
| kernel-debuginfo-common-x86_64 · amzn 2023 | 6.1.59-84.139.amzn2023 | ALAS2023-2023-422 | Oct 30, 2023 |
| kernel-devel · amzn 2023 | 6.1.59-84.139.amzn2023 | ALAS2023-2023-422 | Oct 30, 2023 |
| kernel-headers · amzn 2023 | 6.1.59-84.139.amzn2023 | ALAS2023-2023-422 | Oct 30, 2023 |
| kernel-libbpf · amzn 2023 | 6.1.59-84.139.amzn2023 | ALAS2023-2023-422 | Oct 30, 2023 |
| kernel-libbpf-devel · amzn 2023 | 6.1.59-84.139.amzn2023 | ALAS2023-2023-422 | Oct 30, 2023 |
| kernel-libbpf-static · amzn 2023 | 6.1.59-84.139.amzn2023 | ALAS2023-2023-422 | Oct 30, 2023 |
| kernel-livepatch-6.1.59-84.139 · amzn 2023 | 1.0-0.amzn2023 | ALAS2023-2023-422 | Oct 30, 2023 |
| kernel-modules-extra · amzn 2023 | 6.1.59-84.139.amzn2023 | ALAS2023-2023-422 | Oct 30, 2023 |
| kernel-tools · amzn 2023 | 6.1.59-84.139.amzn2023 | ALAS2023-2023-422 | Oct 30, 2023 |
| kernel-tools-debuginfo · amzn 2023 | 6.1.59-84.139.amzn2023 | ALAS2023-2023-422 | Oct 30, 2023 |
| kernel-tools-devel · amzn 2023 | 6.1.59-84.139.amzn2023 | ALAS2023-2023-422 | Oct 30, 2023 |
| linux · Debian 12.15 (bookworm) | 6.1.64-1 | DEBIAN-CVE-2023-52559 | Mar 2, 2024 |
| linux · Debian 13.5 (trixie) | 6.5.8-1 | DEBIAN-CVE-2023-52559 | Mar 2, 2024 |
| linux · Debian 14 | 6.5.8-1 | DEBIAN-CVE-2023-52559 | Mar 2, 2024 |
| perf · amzn 2023 | 6.1.59-84.139.amzn2023 | ALAS2023-2023-422 | Oct 30, 2023 |
| perf-debuginfo · amzn 2023 | 6.1.59-84.139.amzn2023 | ALAS2023-2023-422 | Oct 30, 2023 |
| python3-perf · amzn 2023 | 6.1.59-84.139.amzn2023 | ALAS2023-2023-422 | Oct 30, 2023 |
| python3-perf-debuginfo · amzn 2023 | 6.1.59-84.139.amzn2023 | ALAS2023-2023-422 | Oct 30, 2023 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.