Received: by 2002:ab2:6816:0:b0:1f9:5764:f03e with SMTP id t22csp2342991lqo; Mon, 20 May 2024 02:51:28 -0700 (PDT) X-Forwarded-Encrypted: i=3; AJvYcCW2hDa6XZnhUG41WVS24MqgTYuQJ+N2JQ5bhzQBsp6jx7BOQ3LMQgoQfJ96cJoW6lkfewxHn5m8geRS8Z+hXFlQ5hGv9IGmYUx2c+mXgQ== X-Google-Smtp-Source: AGHT+IFOuu+L9ZBGf/Fwk7ipqQaDzkh4gIrsmHqZS56UuzgNOnjQGkzakMvGZCnUuew/ynF01zhO X-Received: by 2002:a9d:7d17:0:b0:6f0:e6e2:83b2 with SMTP id 46e09a7af769-6f0e92d183bmr27088778a34.34.1716198688179; Mon, 20 May 2024 02:51:28 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1716198688; cv=pass; d=google.com; s=arc-20160816; b=ZqtYc4BeENHz8eRGlu+pYuW9unUPrJGb1IyjMZTHBamQIB4pjPykX9OxwIaZD9thmj 1SDFWueO+lCb2LXl6k/iRO1EoNquf1XR4+yzO7/DVYzPYB3fn6McWPsFTGlz/DLjwX27 jxkH2Qy+v2CMIjbiGxBiEykrFnd+tP1UuBxgflu+YOCPBiVgc8hy+7qXVUWDf5epPyiy TQ/UJnoMB/UhPSiNuhicH5o8O+611RsgOzrrSAiq3KVzD7ylLYLrG5AFnTu3ZXlPu1Xh JyuAV4h4RsNbRCG/TquabAccsEt0LnhTw2DO0HPQD3Grx9OITYgZfDoOQzKP6ovJNd6k ookg== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:in-reply-to:content-language:references :cc:to:subject:from:user-agent:mime-version:list-unsubscribe :list-subscribe:list-id:precedence:date:message-id:dkim-signature; bh=dpZt6/Fkp6cxSrkFSrKcy3qvvymahFE/nlsFRXFz8oo=; fh=6Qk69uLh/M+gRXJbh3yJOADfbvsZunfoiXJxNJKAYHw=; b=TKbDVrjl5ahnz4QF1xR0FbEJCpXwFbyyxM93ytJGnrJkUO88tiCttOr5Ukws8UPw4t AFTDvJAcvdVm4ap6P4L+ifsW76ElVvRSPrTI/w0ZBzR0tyuk5PiwQwg8JBguDTsIU3zA 2N9IR7Dak2XI4oHXhppMEQBZpmxXNnx+5ceImJnBQp0kPnWsPJgKOuD5RMGQsctFY7mi ayP+vNy8CVlb1HyBevc0D/ekoefNh6KvagTW5zyaT+fywRqmPbu9VpjNq0WAT5qJvkBT D9kHLwtXFq5LO3u7au0mbxww1js5YhcGl5hykcGr29zhs5mKF30GpGNCHUp9B1Z2H66y ivUQ==; dara=google.com ARC-Authentication-Results: i=2; mx.google.com; dkim=pass header.i=@infradead.org header.s=casper.20170209 header.b=IHPcsPjX; arc=pass (i=1 dkim=pass dkdomain=infradead.org); spf=pass (google.com: domain of linux-kernel+bounces-183501-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.48.161 as permitted sender) smtp.mailfrom="linux-kernel+bounces-183501-linux.lists.archive=gmail.com@vger.kernel.org" Return-Path: Received: from sy.mirrors.kernel.org (sy.mirrors.kernel.org. [147.75.48.161]) by mx.google.com with ESMTPS id 41be03b00d2f7-63f14c541b1si15696925a12.289.2024.05.20.02.51.27 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 20 May 2024 02:51:28 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel+bounces-183501-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.48.161 as permitted sender) client-ip=147.75.48.161; Authentication-Results: mx.google.com; dkim=pass header.i=@infradead.org header.s=casper.20170209 header.b=IHPcsPjX; arc=pass (i=1 dkim=pass dkdomain=infradead.org); spf=pass (google.com: domain of linux-kernel+bounces-183501-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.48.161 as permitted sender) smtp.mailfrom="linux-kernel+bounces-183501-linux.lists.archive=gmail.com@vger.kernel.org" Received: from smtp.subspace.kernel.org (wormhole.subspace.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by sy.mirrors.kernel.org (Postfix) with ESMTPS id 44AF2B21120 for ; Mon, 20 May 2024 08:35:52 +0000 (UTC) Received: from localhost.localdomain (localhost.localdomain [127.0.0.1]) by smtp.subspace.kernel.org (Postfix) with ESMTP id 4AB5B1C6B2; Mon, 20 May 2024 08:35:49 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=infradead.org header.i=@infradead.org header.b="IHPcsPjX" Received: from casper.infradead.org (casper.infradead.org [90.155.50.34]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id ADB881C6A0; Mon, 20 May 2024 08:35:43 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=90.155.50.34 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1716194146; cv=none; b=c4ZQuR4qpW/t5eZrdO5YYILfHf6lbba0T67NiHeX93zTv5R9Tt17FMKhVHsnOYT6prRg3I5bLtCWY4MXY77h2aYBMkbcvrXsdRNraz9Y7QjJHE1ZBj421XONUUTVoNVmkxZ3rZnC0onlM/Dhk5rYrWMj1Us6/znZIexXKffWRpg= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1716194146; c=relaxed/simple; bh=3JczJcGfj53wdZ/jePes5M9y0/qIzKmsixfB1tGSndA=; h=Message-ID:Date:MIME-Version:From:Subject:To:Cc:References: In-Reply-To:Content-Type; b=iEnFDb46pC4xWJa2txfxp1YYlu8eWQsd//uvQPt+Op03s1RntmVNQLoSG+BGSG6DjTe+8LxGkDxREQN9QRtYhMwRqn0CarOktIliBBK0S0D5Vf47cANewNBHJiI/ulyanlwZ7tFoKxs3zcTRlutiaU4EbLsXoYcoZieCgAyT35Y= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=infradead.org; spf=none smtp.mailfrom=infradead.org; dkim=pass (2048-bit key) header.d=infradead.org header.i=@infradead.org header.b=IHPcsPjX; arc=none smtp.client-ip=90.155.50.34 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=infradead.org Authentication-Results: smtp.subspace.kernel.org; spf=none smtp.mailfrom=infradead.org DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=infradead.org; s=casper.20170209; h=Content-Transfer-Encoding:Content-Type: In-Reply-To:References:Cc:To:Subject:From:MIME-Version:Date:Message-ID:Sender :Reply-To:Content-ID:Content-Description; bh=dpZt6/Fkp6cxSrkFSrKcy3qvvymahFE/nlsFRXFz8oo=; b=IHPcsPjXdZVdyEsUSG0KgQGlU3 FH9erA1GmVZuG4RGyjZqvkb5FKg8LwSxvysjdg8a1kOx7kuGbY73hOznZcdeHxRhnbc/z3Op9DDmj 9QpdDlW5tJo04MBjsoaubEGcvbKPwOzkrLGADWbi/CIcEVimMOI9V9vcHwm1sS9BHynbh4mkqU2R9 PSpIWPC3RAIgIUAvi+Ugc4DNkeGVWpb6kpPJxQRNWBmTEKO6jkzcn2/1Mp8ULl3p+YpB31DPGJQc4 vSCUCqM4Gh5kO9leuk21HSn7x5QA2jHmqcuE9fiZb1wIKSBJPn7oypp/mnU2gHHKiS5SqMKuLDdLe 8OBEWz3Q==; Received: from fpd2fa7e2a.ap.nuro.jp ([210.250.126.42] helo=[192.168.1.8]) by casper.infradead.org with esmtpsa (Exim 4.97.1 #2 (Red Hat Linux)) id 1s8yUc-0000000FpGq-26qt; Mon, 20 May 2024 08:35:38 +0000 Message-ID: Date: Mon, 20 May 2024 17:35:32 +0900 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 User-Agent: Mozilla Thunderbird From: Geoff Levand Subject: Re: CVE-2023-52665: powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2 To: Michael Ellerman , cve@kernel.org, linux-kernel@vger.kernel.org, linux-cve-announce@vger.kernel.org Cc: Greg Kroah-Hartman , linuxppc-dev@lists.ozlabs.org References: <2024051725-CVE-2023-52665-1d6f@gregkh> <87zfslufoo.fsf@mail.lhotse> Content-Language: en-US In-Reply-To: <87zfslufoo.fsf@mail.lhotse> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit On 5/20/24 16:04, Michael Ellerman wrote: > Greg Kroah-Hartman writes: >> Description >> =========== >> >> In the Linux kernel, the following vulnerability has been resolved: >> >> powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2 >> >> Commit 8c5fa3b5c4df ("powerpc/64: Make ELFv2 the default for big-endian >> builds"), merged in Linux-6.5-rc1 changes the calling ABI in a way >> that is incompatible with the current code for the PS3's LV1 hypervisor >> calls. >> >> This change just adds the line '# CONFIG_PPC64_BIG_ENDIAN_ELF_ABI_V2 is not set' >> to the ps3_defconfig file so that the PPC64_ELF_ABI_V1 is used. >> >> Fixes run time errors like these: >> >> BUG: Kernel NULL pointer dereference at 0x00000000 >> Faulting instruction address: 0xc000000000047cf0 >> Oops: Kernel access of bad area, sig: 11 [#1] >> Call Trace: >> [c0000000023039e0] [c00000000100ebfc] ps3_create_spu+0xc4/0x2b0 (unreliable) >> [c000000002303ab0] [c00000000100d4c4] create_spu+0xcc/0x3c4 >> [c000000002303b40] [c00000000100eae4] ps3_enumerate_spus+0xa4/0xf8 >> >> The Linux kernel CVE team has assigned CVE-2023-52665 to this issue. > > IMHO this doesn't warrant a CVE. The crash mentioned above happens at > boot, so the system is not vulnerable it's just broken :) As Greg says, with PPC64_BIG_ENDIAN_ELF_ABI_V2 enabled the system won't boot, so there is no chance of a vulnerability. -Geoff