Vulnerability · Published May 30, 2024 · Assigned by Linux
CVE-2023-52882clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
Medium 5.5
In plain English
A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 19% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change While PLL CPUX clock rate change when CPU is running from it works in vast majority of cases, now and then it causes instability. This leads to system crashes and other undefined behaviour. After a lot of testing (30+ hours) while also doing a lot of frequency switches, we can't observe any instability issues anymore when doing reparenting to stable clock like 24 MHz oscillator.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | linux | 6.1.94-1 | DEBIAN-CVE-2023-52882 |
| Debian:13 | linux | 6.8.11-1 | DEBIAN-CVE-2023-52882 |
| Debian:14 | linux | 6.8.11-1 | DEBIAN-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux | 5.15.0-118.128 | USN-6950-1 |
| Ubuntu:22.04:LTS | linux | 5.15.0-118.128 | UBUNTU-CVE-2023-52882 |
| Ubuntu:24.04:LTS | linux | 6.8.0-40.40 | USN-6949-1 |
| Ubuntu:24.04:LTS | linux | 6.8.0-40.40 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1067.73 | USN-6950-1 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1067.73 | UBUNTU-CVE-2023-52882 |
| Ubuntu:24.04:LTS | linux-aws | 6.8.0-1013.14 | UBUNTU-CVE-2023-52882 |
| Ubuntu:24.04:LTS | linux-aws | 6.8.0-1013.14 | USN-6949-1 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-aws-6.5 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-aws-6.8 | 6.8.0-1013.14~22.04.1 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1070.79 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1070.79 | USN-6956-1 |
| Ubuntu:24.04:LTS | linux-azure | 6.8.0-1012.14 | UBUNTU-CVE-2023-52882 |
| Ubuntu:24.04:LTS | linux-azure | 6.8.0-1012.14 | USN-6952-2 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-azure-6.5 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-azure-6.8 | 6.8.0-1012.14~22.04.1 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1070.79.1 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1070.79.1 | USN-6956-1 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1066.74 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1066.74 | USN-6950-1 |
| Ubuntu:24.04:LTS | linux-gcp | 6.8.0-1012.13 | USN-6949-1 |
| Ubuntu:24.04:LTS | linux-gcp | 6.8.0-1012.13 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-gcp-6.5 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-gcp-6.8 | 6.8.0-1012.13~22.04.1 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1064.70 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1064.70 | USN-6950-1 |
| Ubuntu:24.04:LTS | linux-gke | 6.8.0-1008.11 | USN-6949-1 |
| Ubuntu:24.04:LTS | linux-gke | 6.8.0-1008.11 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1050.57 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1050.57 | USN-6950-1 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-hwe-6.5 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-hwe-6.8 | 6.8.0-40.40~22.04.3 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1060.63 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1060.63 | USN-6950-2 |
| Ubuntu:24.04:LTS | linux-ibm | 6.8.0-1010.10 | USN-6949-1 |
| Ubuntu:24.04:LTS | linux-ibm | 6.8.0-1010.10 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-ibm-6.8 | 6.8.0-1010.10~22.04.1 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1062.68 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1062.68 | USN-6950-1 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1064.69 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1064.69 | USN-6950-1 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-118.128 | USN-6950-1 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-118.128 | UBUNTU-CVE-2023-52882 |
| Ubuntu:24.04:LTS | linux-lowlatency | 6.8.0-40.40.1 | USN-6949-2 |
| Ubuntu:24.04:LTS | linux-lowlatency | 6.8.0-40.40.1 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.5 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.8 | 6.8.0-40.40.1~22.04.1 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1062.63 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1062.63 | USN-6950-1 |
| Ubuntu:24.04:LTS | linux-nvidia | 6.8.0-1011.11 | USN-6949-1 |
| Ubuntu:24.04:LTS | linux-nvidia | 6.8.0-1011.11 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-nvidia-6.5 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-nvidia-6.8 | 6.8.0-1011.11~22.04.1 | USN-6949-1 |
| Ubuntu:22.04:LTS | linux-nvidia-6.8 | 6.8.0-1011.11~22.04.1 | UBUNTU-CVE-2023-52882 |
| Ubuntu:24.04:LTS | linux-nvidia-lowlatency | 6.8.0-1011.11.1 | USN-6952-1 |
| Ubuntu:24.04:LTS | linux-nvidia-lowlatency | 6.8.0-1011.11.1 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra | 5.15.0-1027.27 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra-igx | 5.15.0-1015.15 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-oem-6.5 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:24.04:LTS | linux-oem-6.8 | 6.8.0-1010.10 | UBUNTU-CVE-2023-52882 |
| Ubuntu:24.04:LTS | linux-oem-6.8 | 6.8.0-1010.10 | USN-6955-1 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1065.71 | USN-6950-3 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1065.71 | UBUNTU-CVE-2023-52882 |
| Ubuntu:24.04:LTS | linux-oracle | 6.8.0-1010.10 | USN-6952-1 |
| Ubuntu:24.04:LTS | linux-oracle | 6.8.0-1010.10 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-oracle-6.5 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-oracle-6.8 | 6.8.0-1010.10~22.04.1 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1060.63 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1060.63 | USN-6950-2 |
| Ubuntu:24.04:LTS | linux-raspi | 6.8.0-1009.10 | UBUNTU-CVE-2023-52882 |
| Ubuntu:24.04:LTS | linux-raspi | 6.8.0-1009.10 | USN-6949-2 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:24.04:LTS | linux-riscv | 6.8.0-40.40.1 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-riscv-6.5 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-riscv-6.8 | 6.8.0-40.40.1~22.04.1 | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-starfive-6.2 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-starfive-6.5 | no fix listed | UBUNTU-CVE-2023-52882 |
| Ubuntu:22.04:LTS | linux-xilinx-zynqmp | 5.15.0-1035.39 | USN-7019-1 |
| Ubuntu:22.04:LTS | linux-xilinx-zynqmp | 5.15.0-1035.39 | UBUNTU-CVE-2023-52882 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 524353ea480b0094c16f2b5684ce7e0a23ab3685 – before fe11826ffa200e1a7a826e745163cb2f47875f66524353ea480b0094c16f2b5684ce7e0a23ab3685 – before bfc78b4628497eb6df09a6b5bba9dd31616ee175524353ea480b0094c16f2b5684ce7e0a23ab3685 – before f1fa9a9816204ac4b118b2e613d3a7c981355019524353ea480b0094c16f2b5684ce7e0a23ab3685 – before 70f64cb29014e4c4f1fabd3265feebd80590d069524353ea480b0094c16f2b5684ce7e0a23ab3685 – before 0b82eb134d2942ecc669e2ab2be3f0a58d79428a524353ea480b0094c16f2b5684ce7e0a23ab3685 – before 9708e5081cfc4f085690294163389bcf82655f90524353ea480b0094c16f2b5684ce7e0a23ab3685 – before 7e91ed763dc07437777bd012af7a2bd4493731ff |
| Linux | Linux | 4.17 |
References
- https://git.kernel.org/stable/c/fe11826ffa200e1a7a826e745163cb2f47875f66
- https://git.kernel.org/stable/c/bfc78b4628497eb6df09a6b5bba9dd31616ee175
- https://git.kernel.org/stable/c/f1fa9a9816204ac4b118b2e613d3a7c981355019
- https://git.kernel.org/stable/c/70f64cb29014e4c4f1fabd3265feebd80590d069
- https://git.kernel.org/stable/c/0b82eb134d2942ecc669e2ab2be3f0a58d79428a
- https://git.kernel.org/stable/c/9708e5081cfc4f085690294163389bcf82655f90
- https://git.kernel.org/stable/c/7e91ed763dc07437777bd012af7a2bd4493731ff
- https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html x_transferred
- https://security.netapp.com/advisory/ntap-20240912-0010/