« Volver al listado

CVE-2023-54167

Estado: AplazadaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

m68k: mm: Move initrd phys_to_virt handling after paging_init()

When booting with an initial ramdisk on platforms where physical memory does not start at address zero (e.g. on Amiga):

As phys_to_virt() relies on m68k_memoffset and module_fixup(), it must not be called before paging_init(). Hence postpone the phys_to_virt handling for the initial ramdisk until after calling paging_init().

While at it, reduce #ifdef clutter by using IS_ENABLED() instead.

Detalles técnicos trazas, registros y código del informe original
    initrd: 0ef0602c - 0f800000
    Zone ranges:
      DMA      [mem 0x0000000008000000-0x000000f7ffffffff]
      Normal   empty
    Movable zone start for each node
    Early memory node ranges
      node   0: [mem 0x0000000008000000-0x000000000f7fffff]
    Initmem setup node 0 [mem 0x0000000008000000-0x000000000f7fffff]
    Unable to handle kernel access at virtual address (ptrval)
    Oops: 00000000
    Modules linked in:
    PC: [<00201d3c>] memcmp+0x28/0x56

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-54167",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "376e3fdecb0dcae216c0ac559cff066f460bf47b",
              "lessThan": "ceb089e2337f810d3594d310953d9af4783f660a",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "376e3fdecb0dcae216c0ac559cff066f460bf47b",
              "lessThan": "58662cfb459150b9c0c22d20cddaea439b3844bd",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "376e3fdecb0dcae216c0ac559cff066f460bf47b",
              "lessThan": "d4b97925e87eb133e400fe4a482d750c74ce392f",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "arch/m68k/kernel/setup_mm.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.17"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "5.17",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "6.1.20",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.2.7",
              "versionType": "semver",
              "lessThanOrEqual": "6.2.*"
            },
            {
              "status": "unaffected",
              "version": "6.3",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "arch/m68k/kernel/setup_mm.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2025-12-30T13:16:04.503",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/58662cfb459150b9c0c22d20cddaea439b3844bd",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/ceb089e2337f810d3594d310953d9af4783f660a",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/d4b97925e87eb133e400fe4a482d750c74ce392f",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Deferred",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nm68k: mm: Move initrd phys_to_virt handling after paging_init()\n\nWhen booting with an initial ramdisk on platforms where physical memory\ndoes not start at address zero (e.g. on Amiga):\n\n    initrd: 0ef0602c - 0f800000\n    Zone ranges:\n      DMA      [mem 0x0000000008000000-0x000000f7ffffffff]\n      Normal   empty\n    Movable zone start for each node\n    Early memory node ranges\n      node   0: [mem 0x0000000008000000-0x000000000f7fffff]\n    Initmem setup node 0 [mem 0x0000000008000000-0x000000000f7fffff]\n    Unable to handle kernel access at virtual address (ptrval)\n    Oops: 00000000\n    Modules linked in:\n    PC: [<00201d3c>] memcmp+0x28/0x56\n\nAs phys_to_virt() relies on m68k_memoffset and module_fixup(), it must\nnot be called before paging_init().  Hence postpone the phys_to_virt\nhandling for the initial ramdisk until after calling paging_init().\n\nWhile at it, reduce #ifdef clutter by using IS_ENABLED() instead."
    }
  ],
  "lastModified": "2026-06-17T06:46:55.653",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}