cve-2023-52882
Vulnerability from cvelistv5
Published
2024-05-30 15:23
Modified
2024-12-19 08:27
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change While PLL CPUX clock rate change when CPU is running from it works in vast majority of cases, now and then it causes instability. This leads to system crashes and other undefined behaviour. After a lot of testing (30+ hours) while also doing a lot of frequency switches, we can't observe any instability issues anymore when doing reparenting to stable clock like 24 MHz oscillator.
References
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/0b82eb134d2942ecc669e2ab2be3f0a58d79428a
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/70f64cb29014e4c4f1fabd3265feebd80590d069
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/7e91ed763dc07437777bd012af7a2bd4493731ff
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9708e5081cfc4f085690294163389bcf82655f90
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/bfc78b4628497eb6df09a6b5bba9dd31616ee175
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f1fa9a9816204ac4b118b2e613d3a7c981355019
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/fe11826ffa200e1a7a826e745163cb2f47875f66
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/0b82eb134d2942ecc669e2ab2be3f0a58d79428a
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/70f64cb29014e4c4f1fabd3265feebd80590d069
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/7e91ed763dc07437777bd012af7a2bd4493731ff
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/9708e5081cfc4f085690294163389bcf82655f90
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/bfc78b4628497eb6df09a6b5bba9dd31616ee175
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/f1fa9a9816204ac4b118b2e613d3a7c981355019
af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/fe11826ffa200e1a7a826e745163cb2f47875f66
af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html
af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20240912-0010/
Impacted products
Vendor Product Version
Linux Linux Version: 4.17
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-09-12T16:02:56.946Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/fe11826ffa200e1a7a826e745163cb2f47875f66"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/bfc78b4628497eb6df09a6b5bba9dd31616ee175"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/f1fa9a9816204ac4b118b2e613d3a7c981355019"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/70f64cb29014e4c4f1fabd3265feebd80590d069"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/0b82eb134d2942ecc669e2ab2be3f0a58d79428a"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/9708e5081cfc4f085690294163389bcf82655f90"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/7e91ed763dc07437777bd012af7a2bd4493731ff"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html"
          },
          {
            "url": "https://security.netapp.com/advisory/ntap-20240912-0010/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-52882",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T17:16:16.700921Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:35:00.657Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/clk/sunxi-ng/ccu-sun50i-h6.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "fe11826ffa200e1a7a826e745163cb2f47875f66",
              "status": "affected",
              "version": "524353ea480b0094c16f2b5684ce7e0a23ab3685",
              "versionType": "git"
            },
            {
              "lessThan": "bfc78b4628497eb6df09a6b5bba9dd31616ee175",
              "status": "affected",
              "version": "524353ea480b0094c16f2b5684ce7e0a23ab3685",
              "versionType": "git"
            },
            {
              "lessThan": "f1fa9a9816204ac4b118b2e613d3a7c981355019",
              "status": "affected",
              "version": "524353ea480b0094c16f2b5684ce7e0a23ab3685",
              "versionType": "git"
            },
            {
              "lessThan": "70f64cb29014e4c4f1fabd3265feebd80590d069",
              "status": "affected",
              "version": "524353ea480b0094c16f2b5684ce7e0a23ab3685",
              "versionType": "git"
            },
            {
              "lessThan": "0b82eb134d2942ecc669e2ab2be3f0a58d79428a",
              "status": "affected",
              "version": "524353ea480b0094c16f2b5684ce7e0a23ab3685",
              "versionType": "git"
            },
            {
              "lessThan": "9708e5081cfc4f085690294163389bcf82655f90",
              "status": "affected",
              "version": "524353ea480b0094c16f2b5684ce7e0a23ab3685",
              "versionType": "git"
            },
            {
              "lessThan": "7e91ed763dc07437777bd012af7a2bd4493731ff",
              "status": "affected",
              "version": "524353ea480b0094c16f2b5684ce7e0a23ab3685",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/clk/sunxi-ng/ccu-sun50i-h6.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.17"
            },
            {
              "lessThan": "4.17",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.276",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.217",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.159",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.91",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.31",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.8.*",
              "status": "unaffected",
              "version": "6.8.10",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.9",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change\n\nWhile PLL CPUX clock rate change when CPU is running from it works in\nvast majority of cases, now and then it causes instability. This leads\nto system crashes and other undefined behaviour. After a lot of testing\n(30+ hours) while also doing a lot of frequency switches, we can\u0027t\nobserve any instability issues anymore when doing reparenting to stable\nclock like 24 MHz oscillator."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-19T08:27:50.546Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/fe11826ffa200e1a7a826e745163cb2f47875f66"
        },
        {
          "url": "https://git.kernel.org/stable/c/bfc78b4628497eb6df09a6b5bba9dd31616ee175"
        },
        {
          "url": "https://git.kernel.org/stable/c/f1fa9a9816204ac4b118b2e613d3a7c981355019"
        },
        {
          "url": "https://git.kernel.org/stable/c/70f64cb29014e4c4f1fabd3265feebd80590d069"
        },
        {
          "url": "https://git.kernel.org/stable/c/0b82eb134d2942ecc669e2ab2be3f0a58d79428a"
        },
        {
          "url": "https://git.kernel.org/stable/c/9708e5081cfc4f085690294163389bcf82655f90"
        },
        {
          "url": "https://git.kernel.org/stable/c/7e91ed763dc07437777bd012af7a2bd4493731ff"
        }
      ],
      "title": "clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change",
      "x_generator": {
        "engine": "bippy-5f407fcff5a0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-52882",
    "datePublished": "2024-05-30T15:23:46.242Z",
    "dateReserved": "2024-05-21T15:35:00.781Z",
    "dateUpdated": "2024-12-19T08:27:50.546Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-52882\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-05-30T16:15:09.937\",\"lastModified\":\"2024-11-21T08:40:47.503\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nclk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change\\n\\nWhile PLL CPUX clock rate change when CPU is running from it works in\\nvast majority of cases, now and then it causes instability. This leads\\nto system crashes and other undefined behaviour. After a lot of testing\\n(30+ hours) while also doing a lot of frequency switches, we can\u0027t\\nobserve any instability issues anymore when doing reparenting to stable\\nclock like 24 MHz oscillator.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: clk: sunxi-ng: h6: CPUX reparent durante el cambio de velocidad de CPUX de PLL. Mientras que el cambio de velocidad de reloj de CPUX de PLL cuando la CPU se est\u00e1 ejecutando, funciona en la gran mayor\u00eda de los casos, de vez en cuando provoca inestabilidad. Esto provoca fallos del sistema y otros comportamientos indefinidos. Despu\u00e9s de muchas pruebas (m\u00e1s de 30 horas) y al mismo tiempo realizar muchos cambios de frecuencia, ya no podemos observar ning\u00fan problema de inestabilidad al realizar la reparaci\u00f3n a un reloj estable como un oscilador de 24 MHz.\"}],\"metrics\":{},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/0b82eb134d2942ecc669e2ab2be3f0a58d79428a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/70f64cb29014e4c4f1fabd3265feebd80590d069\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/7e91ed763dc07437777bd012af7a2bd4493731ff\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/9708e5081cfc4f085690294163389bcf82655f90\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/bfc78b4628497eb6df09a6b5bba9dd31616ee175\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/f1fa9a9816204ac4b118b2e613d3a7c981355019\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/fe11826ffa200e1a7a826e745163cb2f47875f66\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/0b82eb134d2942ecc669e2ab2be3f0a58d79428a\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://git.kernel.org/stable/c/70f64cb29014e4c4f1fabd3265feebd80590d069\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://git.kernel.org/stable/c/7e91ed763dc07437777bd012af7a2bd4493731ff\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://git.kernel.org/stable/c/9708e5081cfc4f085690294163389bcf82655f90\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://git.kernel.org/stable/c/bfc78b4628497eb6df09a6b5bba9dd31616ee175\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://git.kernel.org/stable/c/f1fa9a9816204ac4b118b2e613d3a7c981355019\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://git.kernel.org/stable/c/fe11826ffa200e1a7a826e745163cb2f47875f66\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.netapp.com/advisory/ntap-20240912-0010/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.