CVE-2023-53989

A logic flaw was found in the Linux kernel's arm64 memory management subsystem. The virtual address range sanity check in create_mapping_noalloc() and update_mapping_prot() uses an incorrect condition that only excludes the KASAN shadow region and module region, rather than properly validating addresses translated via TTBR1. This check was the result of historical code changes that inadvertently introduced an erroneous condition.

This is a code correctness fix for arm64 architecture that addresses an incorrect sanity check condition. The flawed check does not create an exploitable vulnerability in practice, as the affected code paths are used during kernel initialization and memory mapping operations that require privileged access. The fix simplifies the logic to properly validate kernel address ranges.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.