CVE-2023-52797

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

drivers: perf: Check find_first_bit() return value

We must check the return value of find_first_bit() before using the

return value as an index array since it happens to overflow the array

and then panic:

[ 107.318430] Kernel BUG [#1]

[ 107.319434] CPU: 3 PID: 1238 Comm: kill Tainted: G E 6.6.0-rc6ubuntu-defconfig #2

[ 107.319465] Hardware name: riscv-virtio,qemu (DT)

[ 107.319551] epc : pmu_sbi_ovf_handler+0x3a4/0x3ae

[ 107.319840] ra : pmu_sbi_ovf_handler+0x52/0x3ae

[ 107.319868] epc : ffffffff80a0a77c ra : ffffffff80a0a42a sp : ffffaf83fecda350

[ 107.319884] gp : ffffffff823961a8 tp : ffffaf8083db1dc0 t0 : ffffaf83fecda480

[ 107.319899] t1 : ffffffff80cafe62 t2 : 000000000000ff00 s0 : ffffaf83fecda520

[ 107.319921] s1 : ffffaf83fecda380 a0 : 00000018fca29df0 a1 : ffffffffffffffff

[ 107.319936] a2 : 0000000001073734 a3 : 0000000000000004 a4 : 0000000000000000

[ 107.319951] a5 : 000

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References