{"schema_version":"1.9.0","id":"CVE-2023-52619","published":"2024-03-18T10:19:05.854Z","modified":"2026-08-12T03:51:30.428002304Z","related":["ALSA-2024:5101","ALSA-2024:5102","SUSE-SU-2024:1466-1","SUSE-SU-2024:1480-1","SUSE-SU-2024:1490-1","SUSE-SU-2024:2892-1","SUSE-SU-2024:2901-1","SUSE-SU-2024:2940-1","USN-6818-2","USN-6819-2"],"summary":"pstore/ram: Fix crash when setting number of cpus to an odd number","details":"In the Linux kernel, the following vulnerability has been resolved:\n\npstore/ram: Fix crash when setting number of cpus to an odd number\n\nWhen the number of cpu cores is adjusted to 7 or other odd numbers,\nthe zone size will become an odd number.\nThe address of the zone will become:\n    addr of zone0 = BASE\n    addr of zone1 = BASE + zone_size\n    addr of zone2 = BASE + zone_size*2\n    ...\nThe address of zone1/3/5/7 will be mapped to non-alignment va.\nEventually crashes will occur when accessing these va.\n\nSo, use ALIGN_DOWN() to make sure the zone size is even\nto avoid this bug.","affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"de83209249d64bad993f25d3ea4bba57683e2e2e"},{"fixed":"8b69c30f4e8b69131d92096cb296dc1f217101e4"},{"fixed":"e9f6ac50890104fdf8194f2865680689239d30fb"},{"fixed":"a63e48cd835c34c38ef671d344cc029b1ea5bf10"},{"fixed":"2a37905d47bffec61e95d99f0c1cc5dc6377956c"},{"fixed":"75b0f71b26b3ad833c5c0670109c0af6e021e86a"},{"fixed":"0593cfd321df9001142a9d2c58d4144917dff7ee"},{"fixed":"cd40e43f870cf21726b22487a95ed223790b3542"},{"fixed":"d49270a04623ce3c0afddbf3e984cb245aa48e9c"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52619.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.10.0"},{"fixed":"4.19.307"}]},{"type":"ECOSYSTEM","events":[{"introduced":"4.20.0"},{"fixed":"5.4.269"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.5.0"},{"fixed":"5.10.210"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.149"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.77"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.16"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.7.4"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52619.json"}}],"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/0593cfd321df9001142a9d2c58d4144917dff7ee"},{"type":"WEB","url":"https://git.kernel.org/stable/c/2a37905d47bffec61e95d99f0c1cc5dc6377956c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/75b0f71b26b3ad833c5c0670109c0af6e021e86a"},{"type":"WEB","url":"https://git.kernel.org/stable/c/8b69c30f4e8b69131d92096cb296dc1f217101e4"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a63e48cd835c34c38ef671d344cc029b1ea5bf10"},{"type":"WEB","url":"https://git.kernel.org/stable/c/cd40e43f870cf21726b22487a95ed223790b3542"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d49270a04623ce3c0afddbf3e984cb245aa48e9c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e9f6ac50890104fdf8194f2865680689239d30fb"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52619.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52619"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52619.json"}}