CVE-2023-52482

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

x86/srso: Add SRSO mitigation for Hygon processors

Add mitigation for the speculative return stack overflow vulnerability which exists on Hygon processors too.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
LinuxLinux>= c9661c1e80b609cd038db7c908e061f0535804ef, < e7ea043bc3f19473561c08565047b3f1671bf35d; >= c9661c1e80b609cd038db7c908e061f0535804ef, < f090a8b4d2e3ec6f318d6fdab243a2edc5a8cc37; >= c9661c1e80b609cd038db7c908e061f0535804ef, < 6ce2f297a7168274547d0b5aea6c7c16268b8a96; >= c9661c1e80b609cd038db7c908e061f0535804ef, < cf43b304b6952b549d58feabc342807b334f03d4; >= c9661c1e80b609cd038db7c908e061f0535804ef, < a5ef7d68cea1344cf524f04981c2b3f80bedbb0d
LinuxLinux4.20

References

Timeline

Published
Feb 29, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-524837.8In the Linux kernel, the following vulnerability has been resolved: mctp: perform route lookups under a RCU read-side lock Our current rouCVE-2023-524845.5In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_CVE-2023-524855.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wake DMCUB before sending a command [Why] We can hangCVE-2023-524865.5In the Linux kernel, the following vulnerability has been resolved: drm: Don't unref the same fb many times by mistake due to deadlock handCVE-2023-524875.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix peer flow lists handling The cited change refactored mlCVE-2023-524885.5In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FCVE-2023-524894.7In the Linux kernel, the following vulnerability has been resolved: mm/sparsemem: fix race in accessing memory_section->usage The below raCVE-2023-52497.0Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to mCVE-2023-524905.5In the Linux kernel, the following vulnerability has been resolved: mm: migrate: fix getting incorrect page mapping during page migration CVE-2023-524917.8In the Linux kernel, the following vulnerability has been resolved: media: mtk-jpeg: Fix use after free bug due to error path handling in mCVE-2023-524924.4In the Linux kernel, the following vulnerability has been resolved: dmaengine: fix NULL pointer in channel unregistration function __dma_aCVE-2023-524935.5In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Drop chan lock before queuing buffers Ensure read and
CVE-2023-52482: High severity, CVSS 7.8 | Vulnix