CVE-2023-54322

highPriorität · verfolgen · 0EPSS 0.002 · 8. PerzentilDEEURU
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.19% (8th) EPSS
CVSS 7.1 · high
Is it mine?
43 products
Prüfe deine Angriffsfläche
Who says so?
5 sources
cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-27

In the Linux kernel, the following vulnerability has been resolved: arm64: set __exception_irq_entry with __irq_entry as a default filter_irq_stacks() is supposed to cut entries which are related irq entries from its call stack. And in_irqentry_text() which is called by filter_irq_stacks() uses __irqentry_text_start/end symbol to find irq entries in callstack. But it doesn't work correctly as without "CONFIG_FUNCTION_GRAPH_TRACER", arm64 kernel doesn't include gic_handle_irq which is entry point of arm64 irq between __irqentry_text_start and __irqentry_text_end as we discussed in below link. https://lore.kernel.org/all/CACT4Y+aReMGLYua2rCLHgFpS9io5cZC04Q8GLs-uNmrn1ezxYQ@mail.gmail.com/#t This problem can makes unintentional deep call stack entries especially in KASAN enabled situation as below. [ 2479.383395]I[0:launcher-loader: 1719] Stack depot reached limit capacity [ 2479.383538]I[0:launcher-loader: 1719] WARNING: CPU: 0 PID: 1719 at lib/stackdepot.c:129 __stack_depot_save+0x464/0x46c [ 2479.385693]I[0:launcher-loader: 1719] pstate: 624000c5 (nZCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 2479.385724]I[0:launcher-loader: 1719] pc : __stack_depot_save+0x464/0x46c [ 2479.385751]I[0:launcher-loader: 1719] lr : __stack_depot_save+0x460/0x46c [ 2479.385774]I[0:launcher-loader: 1719] sp : ffffffc0080073c0 [ 2479.385793]I[0:launcher-loader: 1719] x29: ffffffc0080073e0 x28: ffffffd00b78a000 x27: 0000000000000000 [ 2479.385839]I[0:launcher-loader: 1719] x26: 000000000004d1dd x25: ffffff891474f000 x24: 00000000ca64d1dd [ 2479.385882]I[0:launcher-loader: 1719] x23: 0000000000000200 x22: 0000000000000220 x21: 0000000000000040 [ 2479.385925]I[0:launcher-loader: 1719] x20: ffffffc008007440 x19: 0000000000000000 x18: 0000000000000000 [ 2479.385969]I[0:launcher-loader: 1719] x17: 2065726568207475 x16: 000000000000005e x15: 2d2d2d2d2d2d2d20 [ 2479.386013]I[0:launcher-loader: 1719] x14: 5d39313731203a72 x13: 00000000002f6b30 x12: 00000000002f6af8 [ 2479.386057]I[0:launcher-loader: 1719] x11: 00000000ffffffff x10: ffffffb90aacf000 x9 : e8a74a6c16008800 [ 2479.386101]I[0:launcher-loader: 1719] x8 : e8a74a6c16008800 x7 : 00000000002f6b30 x6 : 00000000002f6af8 [ 2479.386145]I[0:launcher-loader: 1719] x5 : ffffffc0080070c8 x4 : ffffffd00b192380 x3 : ffffffd0092b313c [ 2479.386189]I[0:launcher-loader: 1719] x2 : 0000000000000001 x1 : 0000000000000004 x0 : 0000000000000022 [ 2479.386231]I[0:launcher-loader: 1719] Call trace: [ 2479.386248]I[0:launcher-loader: 1719] __stack_depot_save+0x464/0x46c [ 2479.386273]I[0:launcher-loader: 1719] kasan_save_stack+0x58/0x70 [ 2479.386303]I[0:launcher-loader: 1719] save_stack_info+0x34/0x138 [ 2479.386331]I[0:launcher-loader: 1719] kasan_save_free_info+0x18/0x24 [ 2479.386358]I[0:launcher-loader: 1719] ____kasan_slab_free+0x16c/0x170 [ 2479.386385]I[0:launcher-loader: 1719] __kasan_slab_free+0x10/0x20 [ 2479.386410]I[0:launcher-loader: 1719] kmem_cache_free+0x238/0x53c [ 2479.386435]I[0:launcher-loader: 1719] mempool_free_slab+0x1c/0x28 [ 2479.386460]I[0:launcher-loader: 1719] mempool_free+0x7c/0x1a0 [ 2479.386484]I[0:launcher-loader: 1719] bvec_free+0x34/0x80 [ 2479.386514]I[0:launcher-loader: 1719] bio_free+0x60/0x98 [ 2479.386540]I[0:launcher-loader: 1719] bio_put+0x50/0x21c [ 2479.386567]I[0:launcher-loader: 1719] f2fs_write_end_io+0x4ac/0x4d0 [ 2479.386594]I[0:launcher-loader: 1719] bio_endio+0x2dc/0x300 [ 2479.386622]I[0:launcher-loader: 1719] __dm_io_complete+0x324/0x37c [ 2479.386650]I[0:launcher-loader: 1719] dm_io_dec_pending+0x60/0xa4 [ 2479.386676]I[0:launcher-loader: 1719] clone_endio+0xf8/0x2f0 [ 2479.386700]I[0:launcher-loader: 1719] bio_endio+0x2dc/0x300 [ 2479.386727]I[0:launcher-loader: 1719] blk_update_request+0x258/0x63c [ 2479.386754]I[0:launcher-loader: 1719] scsi_end_request+0x50/0x304 [ 2479.386782]I[0:launcher-loader: 1719] scsi_io_completion+0x88/0x160 [ 2479.386808]I[0:launcher-loader: 1719] scsi_finish_command+0x17c/0x194 [ 2479.386833]I ---truncated---

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • Behobenkernel-devel-rt-0:5.14.21-150500.13.118.1.noarch as component of SUSE Linux Enterprise Micro 5.5suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-rt-0:5.14.21-150500.13.118.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-source-rt-0:5.14.21-150500.13.118.1.noarch as component of SUSE Linux Enterprise Micro 5.5suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobencluster-md-kmp-rt-0:6.4.0-150700.7.28.1.x86_64 as component of SUSE Real Time Module 15 SP7suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobendlm-kmp-rt-0:6.4.0-150700.7.28.1.x86_64 as component of SUSE Real Time Module 15 SP7suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobengfs2-kmp-rt-0:6.4.0-150700.7.28.1.x86_64 as component of SUSE Real Time Module 15 SP7suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-devel-rt-0:6.4.0-150700.7.28.1.noarch as component of SUSE Real Time Module 15 SP7suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-livepatch-6_4_0-150700_7_28-rt-0:1-150700.1.3.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP7suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-rt-0:6.4.0-150700.7.28.1.x86_64 as component of SUSE Real Time Module 15 SP7suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-rt-devel-0:6.4.0-150700.7.28.1.x86_64 as component of SUSE Real Time Module 15 SP7suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-source-rt-0:6.4.0-150700.7.28.1.noarch as component of SUSE Real Time Module 15 SP7suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-syms-rt-0:6.4.0-150700.7.28.1.x86_64 as component of SUSE Real Time Module 15 SP7suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenocfs2-kmp-rt-0:6.4.0-150700.7.28.1.x86_64 as component of SUSE Real Time Module 15 SP7suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-azure-0:6.4.0-150700.20.24.1.aarch64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP7suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-azure-0:6.4.0-150700.20.24.1.x86_64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP7suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-azure-devel-0:6.4.0-150700.20.24.1.aarch64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP7suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-azure-devel-0:6.4.0-150700.20.24.1.x86_64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP7suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-devel-azure-0:6.4.0-150700.20.24.1.noarch as component of SUSE Linux Enterprise Module for Public Cloud 15 SP7suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-source-azure-0:6.4.0-150700.20.24.1.noarch as component of SUSE Linux Enterprise Module for Public Cloud 15 SP7suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-syms-azure-0:6.4.0-150700.20.24.1.aarch64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP7suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-syms-azure-0:6.4.0-150700.20.24.1.x86_64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP7suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-default-0:6.4.0-39.1.aarch64 as component of SUSE Linux Micro 6.0suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-default-0:6.4.0-39.1.s390x as component of SUSE Linux Micro 6.0suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-default-0:6.4.0-39.1.x86_64 as component of SUSE Linux Micro 6.0suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-default-base-0:6.4.0-39.1.21.16.aarch64 as component of SUSE Linux Micro 6.0suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-default-base-0:6.4.0-39.1.21.16.x86_64 as component of SUSE Linux Micro 6.0suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-default-livepatch-0:6.4.0-39.1.s390x as component of SUSE Linux Micro 6.0suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-default-livepatch-0:6.4.0-39.1.x86_64 as component of SUSE Linux Micro 6.0suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-devel-0:6.4.0-39.1.noarch as component of SUSE Linux Micro 6.0suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-kvmsmall-0:6.4.0-39.1.x86_64 as component of SUSE Linux Micro 6.0suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-macros-0:6.4.0-39.1.noarch as component of SUSE Linux Micro 6.0suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-source-0:6.4.0-39.1.noarch as component of SUSE Linux Micro 6.0suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-default-0:6.4.0-39.1.aarch64 as component of SUSE Linux Micro 6.1suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-default-0:6.4.0-39.1.ppc64le as component of SUSE Linux Micro 6.1suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-default-0:6.4.0-39.1.s390x as component of SUSE Linux Micro 6.1suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-default-0:6.4.0-39.1.x86_64 as component of SUSE Linux Micro 6.1suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-default-base-0:6.4.0-39.1.21.16.aarch64 as component of SUSE Linux Micro 6.1suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-default-base-0:6.4.0-39.1.21.16.ppc64le as component of SUSE Linux Micro 6.1suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-default-base-0:6.4.0-39.1.21.16.x86_64 as component of SUSE Linux Micro 6.1suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-default-devel-0:6.4.0-39.1.aarch64 as component of SUSE Linux Micro 6.1suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-default-devel-0:6.4.0-39.1.ppc64le as component of SUSE Linux Micro 6.1suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-default-devel-0:6.4.0-39.1.s390x as component of SUSE Linux Micro 6.1suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-default-devel-0:6.4.0-39.1.x86_64 as component of SUSE Linux Micro 6.1suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-default-livepatch-0:6.4.0-39.1.s390x as component of SUSE Linux Micro 6.1suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-default-livepatch-0:6.4.0-39.1.x86_64 as component of SUSE Linux Micro 6.1suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-devel-0:6.4.0-39.1.noarch as component of SUSE Linux Micro 6.1suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-kvmsmall-0:6.4.0-39.1.x86_64 as component of SUSE Linux Micro 6.1suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-macros-0:6.4.0-39.1.noarch as component of SUSE Linux Micro 6.1suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-source-0:6.4.0-39.1.noarch as component of SUSE Linux Micro 6.1suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-devel-rt-0:6.4.0-40.1.noarch as component of SUSE Linux Micro 6.0suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-rt-0:6.4.0-40.1.x86_64 as component of SUSE Linux Micro 6.0suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-rt-livepatch-0:6.4.0-40.1.x86_64 as component of SUSE Linux Micro 6.0suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-source-rt-0:6.4.0-40.1.noarch as component of SUSE Linux Micro 6.0suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-devel-rt-0:6.4.0-40.1.noarch as component of SUSE Linux Micro 6.1suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-rt-0:6.4.0-40.1.aarch64 as component of SUSE Linux Micro 6.1suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-rt-0:6.4.0-40.1.x86_64 as component of SUSE Linux Micro 6.1suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-rt-devel-0:6.4.0-40.1.aarch64 as component of SUSE Linux Micro 6.1suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-rt-devel-0:6.4.0-40.1.x86_64 as component of SUSE Linux Micro 6.1suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-rt-livepatch-0:6.4.0-40.1.x86_64 as component of SUSE Linux Micro 6.1suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Behobenkernel-source-rt-0:6.4.0-40.1.noarch as component of SUSE Linux Micro 6.1suse_csaf

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.1
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–high · 2.5–7.1

v3.17.1highAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Hsecondary · FSTEC (BDU) RU
v3.12.5lowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:Lsecondary · SUSE Product Security
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

04

betroffene Produkte (43)

Betroffene Produkte und Versionsbereiche.

20 von 43 angezeigt
05

Advisories (8)

Hersteller- und Ökosystem-Meldungen dazu.

06

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

veröffentlicht 2025-12-30geändert 2026-10-21
08

Referenzen (16)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan