um: time-travel: fix time corruption (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.23 % · centile 13 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Analyzed
Description
In the Linux kernel, the following vulnerability has been resolved: um: time-travel: fix time corruption In 'basic' time-travel mode (without =inf-cpu or =ext), we still get timer interrupts. These can happen at arbitrary points in time, i.e. while in timer_read(), which pushes time forward just a little bit. Then, if we happen to get the interrupt after calculating the new time to push to, but before actually finishing that, the interrupt will set the time to a value that's incompatible with the forward, and we'll crash because time goes backwards when we do the forwarding. Fix this by reading the time_travel_time, calculating the adjustment, and doing the adjustment all with interrupts disabled.
Faiblesses (CWE)
- CWE-787 — Écriture hors limites
Références
- https://git.kernel.org/stable/c/0c7478a2da3f5fe106b4658338873d50c86ac7ab
- https://git.kernel.org/stable/c/4f7dad73df4cdb2b7042103d3922745d040ad025
- https://git.kernel.org/stable/c/de3e9d8e8d1ae0a4d301109d1ec140796901306c
- https://git.kernel.org/stable/c/b427f55e9d4185f6f17cc1e3296eb8d0c4425283
- https://git.kernel.org/stable/c/abe4eaa8618bb36c2b33e9cdde0499296a23448c
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.0 | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2023-57257
- GCVE · GCVE-0-2023-52633
Avis du CERT-FR
- CERTFR-2024-AVI-0456 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0439 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0422 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0383 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0334 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*< 5.15.149cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.16 < 6.1.77cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.2 < 6.6.16cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.7 < 6.7.4
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected 065038706f77a56754e8f0c2556dab7e22dfe577 < 0c7478a2da3f5fe106b4658338873d50c86ac7ab ; affected 065038706f77a56754e8f0c2556dab7e22dfe577 < 4f7dad73df4cdb2b7042103d3922745d040ad025 ; affected 065038706f77a56754e8f0c2556dab7e22dfe577 < de3e9d8e8d1ae0a4d301109d1ec140796901306c ; affected 065038706f77a56754e8f0c2556dab7e22dfe577 < b427f55e9d4185f6f17cc1e3296eb8d0c4425283 ; affected 065038706f77a56754e8f0c2556dab7e22dfe577 < abe4eaa8618bb36c2b33e9cdde0499296a23448c |
| Linux · Linux | affected 5.3 ; unaffected 0 < 5.3 ; unaffected 5.15.149 ≤ 5.15.* ; unaffected 6.1.77 ≤ 6.1.* ; unaffected 6.6.16 ≤ 6.6.* ; unaffected 6.7.4 ≤ 6.7.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |