Linux Kernel RISC-V PMU Driver Vulnerability Affecting Performance Monitoring

CVE-2023-53583

What is CVE-2023-53583?

A flaw in the Linux kernel's RISC-V Performance Monitoring Unit (PMU) driver prevents proper state management after performance event overflow. Specifically, the riscv_pmu_start() function incorrectly checks the PERF_HES_STOPPED flag, leading to a WARN_ON_ONCE warning when performance events are unthrottled. This behavior deviates from the implementation of other PMU drivers and results in unnecessary warnings during performance monitoring, impacting system stability. Removing the unnecessary checks is advised to eliminate these warnings and ensure smoother operation.

References