Bugzilla – Bug 1224599
VUL-0: CVE-2023-52665: kernel: powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2
Last modified: 2024-06-10 12:23:27 UTC
In the Linux kernel, the following vulnerability has been resolved: powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2 Commit 8c5fa3b5c4df ("powerpc/64: Make ELFv2 the default for big-endian builds"), merged in Linux-6.5-rc1 changes the calling ABI in a way that is incompatible with the current code for the PS3's LV1 hypervisor calls. This change just adds the line '# CONFIG_PPC64_BIG_ENDIAN_ELF_ABI_V2 is not set' to the ps3_defconfig file so that the PPC64_ELF_ABI_V1 is used. Fixes run time errors like these: BUG: Kernel NULL pointer dereference at 0x00000000 Faulting instruction address: 0xc000000000047cf0 Oops: Kernel access of bad area, sig: 11 [#1] Call Trace: [c0000000023039e0] [c00000000100ebfc] ps3_create_spu+0xc4/0x2b0 (unreliable) [c000000002303ab0] [c00000000100d4c4] create_spu+0xcc/0x3c4 [c000000002303b40] [c00000000100eae4] ps3_enumerate_spus+0xa4/0xf8 References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-52665 https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2023/CVE-2023-52665.mbox https://git.kernel.org/stable/c/f70557d48215b14a9284ac3a6ae7e4ee1d039f10 https://git.kernel.org/stable/c/d0f0780f03df54d08ced118d27834ee5008724e4 https://git.kernel.org/stable/c/482b718a84f08b6fc84879c3e90cc57dba11c115 https://www.cve.org/CVERecord?id=CVE-2023-52665 https://bugzilla.redhat.com/show_bug.cgi?id=2281354
https://www.suse.com/security/cve/CVE-2023-52665.html cvss 5.5
We do not support PS3 nor bigendian with any Linux kernel after 3.0.
All done, closing.