CVE-2023-53024

A vulnerability was found in the Linux kernel's eBPF verifier function check_stack_write(), where pointer leakage can occur due to insufficient speculative store bypass mitigation. This issue occurs because the original mitigation inserts lfence instructions after initializing a stack slot and spilling a pointer to the stack. This does not protect against cases where a stack slot is initialized with a pointer and then overwritten with a scalar. When the overwrite happens, it may be subject to speculative story bypass (SSB), allowing the program to leak the numerical pointer value.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.