Stack Overflow Vulnerability in Linux Kernel from Kprobe Registration

CVE-2023-53655

What is CVE-2023-53655?

A stack overflow vulnerability exists within the Linux kernel due to improper kprobe registration on the function __rcu_irq_enter_check_tick(). This vulnerability allows an attacker to exploit insufficient stack space, leading to potential kernel panic situations. This issue can be reproduced under specific kernel configuration settings, ultimately resulting in system instability. To mitigate this, the affected function has been added to a blacklist to prevent kprobe registration.

References