Bug 1216339 (CVE-2023-22025) - VUL-0: CVE-2023-22025: java-17-openjdk, java-21-openjdk: memory corruption issue on x86_64 with AVX-512
Summary: VUL-0: CVE-2023-22025: java-17-openjdk, java-21-openjdk: memory corruption is...
Status: RESOLVED FIXED
Alias: CVE-2023-22025
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Normal
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/381966/
Whiteboard: CVSSv3.1:SUSE:CVE-2023-22025:3.7:(AV:...
Keywords:
Depends on:
Blocks:
 
Reported: 2023-10-17 12:30 UTC by SMASH SMASH
Modified: 2024-05-24 11:11 UTC (History)
3 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description SMASH SMASH 2023-10-17 12:30:50 UTC
A memory corruption issue was found in JDK-21 on x86_64 with AVX-512. The issue seems to be caused by the calling of the super class's "Ideal()" method in "LoadVectorMaskedNode::Ideal()".

Reference:
https://mail.openjdk.org/pipermail/hotspot-compiler-dev/2023-September/068447.html
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-22025
Comment 1 Gabriele Sonnu 2023-10-17 12:34:32 UTC
To prevent this, AVX512 instructions have been disabled in 21.0.1, a proper fix will be delivered with openjdk 21.0.2.
Comment 2 Gabriele Sonnu 2023-10-18 08:27:32 UTC
According to Oracle October 2023 CPU, this also affects java-1_8_0-openjdk and java-17-openjdk.

[0] https://www.oracle.com/security-alerts/cpuoct2023.html
Comment 3 Gabriele Sonnu 2023-10-18 11:54:46 UTC
java-1_8_0-openjdk is not affected, only 17 and 21.
Comment 5 Maintenance Automation 2023-10-31 12:30:47 UTC
SUSE-SU-2023:4289-1: An update that solves two vulnerabilities and has one security fix can now be installed.

Category: security (important)
Bug References: 1214790, 1216339, 1216374
CVE References: CVE-2023-22025, CVE-2023-22081
Sources used:
openSUSE Leap 15.4 (src): java-17-openjdk-17.0.9.0-150400.3.33.1
openSUSE Leap 15.5 (src): java-17-openjdk-17.0.9.0-150400.3.33.1
Basesystem Module 15-SP4 (src): java-17-openjdk-17.0.9.0-150400.3.33.1
Basesystem Module 15-SP5 (src): java-17-openjdk-17.0.9.0-150400.3.33.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 7 Maintenance Automation 2023-11-27 12:30:53 UTC
SUSE-SU-2023:4572-1: An update that solves four vulnerabilities and has two security fixes can now be installed.

Category: security (important)
Bug References: 1204264, 1216339, 1216374, 1216379, 1216640, 1217214
CVE References: CVE-2023-22025, CVE-2023-22067, CVE-2023-22081, CVE-2023-5676
Sources used:

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 8 Maintenance Automation 2023-11-29 16:30:01 UTC
SUSE-SU-2023:4614-1: An update that solves four vulnerabilities and has two security fixes can now be installed.

Category: security (important)
Bug References: 1204264, 1216339, 1216374, 1216379, 1216640, 1217214
CVE References: CVE-2023-22025, CVE-2023-22067, CVE-2023-22081, CVE-2023-5676
Sources used:

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Comment 11 Fridrich Strba 2024-03-05 11:51:02 UTC
Fixed, please close.
Comment 12 Alexander Bergmann 2024-05-24 11:11:03 UTC
Released. Closing bug.