* Re: CVE-2023-53212: xenbus: check xen_domain in xenbus_probe_initcall
[not found] <2025091511-CVE-2023-53212-fdd4@gregkh>
@ 2025-09-15 14:38 ` Juergen Gross
2025-09-15 14:52 ` Greg KH
0 siblings, 1 reply; 2+ messages in thread
From: Juergen Gross @ 2025-09-15 14:38 UTC (permalink / raw)
To: cve, linux-kernel
[-- Attachment #1.1.1: Type: text/plain, Size: 1234 bytes --]
On 15.09.25 16:21, Greg Kroah-Hartman wrote:
> From: Greg Kroah-Hartman <gregkh@kernel.org>
>
> Description
> ===========
>
> In the Linux kernel, the following vulnerability has been resolved:
>
> xenbus: check xen_domain in xenbus_probe_initcall
>
> The same way we already do in xenbus_init.
> Fixes the following warning:
>
> [ 352.175563] Trying to free already-free IRQ 0
> [ 352.177355] WARNING: CPU: 1 PID: 88 at kernel/irq/manage.c:1893 free_irq+0xbf/0x350
> [...]
> [ 352.213951] Call Trace:
> [ 352.214390] <TASK>
> [ 352.214717] ? __warn+0x81/0x170
> [ 352.215436] ? free_irq+0xbf/0x350
> [ 352.215906] ? report_bug+0x10b/0x200
> [ 352.216408] ? prb_read_valid+0x17/0x20
> [ 352.216926] ? handle_bug+0x44/0x80
> [ 352.217409] ? exc_invalid_op+0x13/0x60
> [ 352.217932] ? asm_exc_invalid_op+0x16/0x20
> [ 352.218497] ? free_irq+0xbf/0x350
> [ 352.218979] ? __pfx_xenbus_probe_thread+0x10/0x10
> [ 352.219600] xenbus_probe+0x7a/0x80
> [ 352.221030] xenbus_probe_thread+0x76/0xc0
>
> The Linux kernel CVE team has assigned CVE-2023-53212 to this issue.
I don't see how an unprivileged user could trigger this problem.
Please revoke this CVE.
Juergen
[-- Attachment #1.1.2: OpenPGP public key --]
[-- Type: application/pgp-keys, Size: 3743 bytes --]
[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 495 bytes --]
^ permalink raw reply [flat|nested] 2+ messages in thread* Re: CVE-2023-53212: xenbus: check xen_domain in xenbus_probe_initcall
2025-09-15 14:38 ` CVE-2023-53212: xenbus: check xen_domain in xenbus_probe_initcall Juergen Gross
@ 2025-09-15 14:52 ` Greg KH
0 siblings, 0 replies; 2+ messages in thread
From: Greg KH @ 2025-09-15 14:52 UTC (permalink / raw)
To: Juergen Gross; +Cc: cve, linux-kernel
On Mon, Sep 15, 2025 at 04:38:05PM +0200, Juergen Gross wrote:
> On 15.09.25 16:21, Greg Kroah-Hartman wrote:
> > From: Greg Kroah-Hartman <gregkh@kernel.org>
> >
> > Description
> > ===========
> >
> > In the Linux kernel, the following vulnerability has been resolved:
> >
> > xenbus: check xen_domain in xenbus_probe_initcall
> >
> > The same way we already do in xenbus_init.
> > Fixes the following warning:
> >
> > [ 352.175563] Trying to free already-free IRQ 0
> > [ 352.177355] WARNING: CPU: 1 PID: 88 at kernel/irq/manage.c:1893 free_irq+0xbf/0x350
> > [...]
> > [ 352.213951] Call Trace:
> > [ 352.214390] <TASK>
> > [ 352.214717] ? __warn+0x81/0x170
> > [ 352.215436] ? free_irq+0xbf/0x350
> > [ 352.215906] ? report_bug+0x10b/0x200
> > [ 352.216408] ? prb_read_valid+0x17/0x20
> > [ 352.216926] ? handle_bug+0x44/0x80
> > [ 352.217409] ? exc_invalid_op+0x13/0x60
> > [ 352.217932] ? asm_exc_invalid_op+0x16/0x20
> > [ 352.218497] ? free_irq+0xbf/0x350
> > [ 352.218979] ? __pfx_xenbus_probe_thread+0x10/0x10
> > [ 352.219600] xenbus_probe+0x7a/0x80
> > [ 352.221030] xenbus_probe_thread+0x76/0xc0
> >
> > The Linux kernel CVE team has assigned CVE-2023-53212 to this issue.
>
> I don't see how an unprivileged user could trigger this problem.
>
> Please revoke this CVE.
Now rejected, thanks for the review!
greg k-h
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2025-09-15 14:54 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
[not found] <2025091511-CVE-2023-53212-fdd4@gregkh>
2025-09-15 14:38 ` CVE-2023-53212: xenbus: check xen_domain in xenbus_probe_initcall Juergen Gross
2025-09-15 14:52 ` Greg KH
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®