CVE-2023-52619: pstore/ram: Fix crash when setting number of cpus to an odd number
Vulnerability summary
CVE-2023-52619 is a medium (CVSS 5.5) vulnerability in debian debian_linux. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 15.5% of scored vulnerabilities.
Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 29 · Related 22Timeline
- 18-03-2024PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Fix crash when setting number of cpus to an odd number When the number of cpu cores is adjusted to 7 or other odd numbers, the zone size will become an odd number. The address of the zone will become: addr of zone0 = BASE addr of zone1 = BASE + zone_size addr of zone2 = BASE + zone_size*2 ... The address of zone1/3/5/7 will be mapped to non-alignment va. Eventually crashes will occur when accessing these va. So, use ALIGN_DOWN() to make sure the zone size is even to avoid this bug.
CVSS metrics
3 scores · 3 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.24%
Chance of exploitation in the next 30 days
Percentile
16%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.24% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu117 products
- linuxAll versions (No fix recorded) | < 5.4.0-181.201 | < 5.15.0-106.116
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.4.0-1124.134 | < 5.15.0-1061.67
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian2 products
- linux< 6.1.82-1 | < 6.7.7-1
- debian_linuxEOL10.0
Linux2 products
- linux≥ de83209249d64bad993f25d3ea4bba57683e2e2e, < 8b69c30f4e8b69131d92096cb296dc1f217101e4 | ≥ de83209249d64bad993f25d3ea4bba57683e2e2e, < e9f6ac50890104fdf8194f2865680689239d30fb | ≥ de83209249d64bad993f25d3ea4bba57683e2e2e, < a63e48cd835c34c38ef671d344cc029b1ea5bf10 | ≥ de83209249d64bad993f25d3ea4bba57683e2e2e, < 2a37905d47bffec61e95d99f0c1cc5dc6377956c | ≥ de83209249d64bad993f25d3ea4bba57683e2e2e, < 75b0f71b26b3ad833c5c0670109c0af6e021e86a | ≥ de83209249d64bad993f25d3ea4bba57683e2e2e, < 0593cfd321df9001142a9d2c58d4144917dff7ee | ≥ de83209249d64bad993f25d3ea4bba57683e2e2e, < cd40e43f870cf21726b22487a95ed223790b3542 | ≥ de83209249d64bad993f25d3ea4bba57683e2e2e, < d49270a04623ce3c0afddbf3e984cb245aa48e9c | 4.10
- linux_kernel< 4.19.307 | ≥ 4.20, < 5.4.269 | ≥ 5.5, < 5.10.210 | ≥ 5.11, < 5.15.149 | ≥ 5.16, < 6.1.77 | ≥ 6.2, < 6.6.16 | ≥ 6.7, < 6.7.4
3 vendors · 121 products
