CVE-2023-52615

hwrng: core - Fix page fault dead lock on mmap-ed hwrng

published March 18, 2024

CVSS
—
EPSS
0%
Percentile
8.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

hwrng: core - Fix page fault dead lock on mmap-ed hwrng

There is a dead-lock in the hwrng device read path. This triggers

when the user reads from /dev/hwrng into memory also mmap-ed from

/dev/hwrng. The resulting page fault triggers a recursive read

which then dead-locks.

Fix this by using a stack buffer when calling copy_to_user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00195 · 8.7th percentile
Published
2024-03-18T10:14Z
EPSS history
Timeline
  • 18 MAR 10:14Z
    hwrng: core - Fix page fault dead lock on mmap-ed hwrng
    cvelistv5