CVE-2023-53702 (GCVE-0-2023-53702)
Vulnerability from cvelistv5
Published
2025-10-22 13:23
Modified
2025-10-22 13:23
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: s390/crypto: use vector instructions only if available for ChaCha20 Commit 349d03ffd5f6 ("crypto: s390 - add crypto library interface for ChaCha20") added a library interface to the s390 specific ChaCha20 implementation. However no check was added to verify if the required facilities are installed before branching into the assembler code. If compiled into the kernel, this will lead to the following crash, if vector instructions are not available: data exception: 0007 ilc:3 [#1] SMP Modules linked in: CPU: 0 PID: 1 Comm: swapper/0 Not tainted 6.3.0-rc7+ #11 Hardware name: IBM 3931 A01 704 (KVM/Linux) Krnl PSW : 0704e00180000000 000000001857277a (chacha20_vx+0x32/0x818) R:0 T:1 IO:1 EX:1 Key:0 M:1 W:0 P:0 AS:3 CC:2 PM:0 RI:0 EA:3 Krnl GPRS: 0000037f0000000a ffffffffffffff60 000000008184b000 0000000019f5c8e6 0000000000000109 0000037fffb13c58 0000037fffb13c78 0000000019bb1780 0000037fffb13c58 0000000019f5c8e6 000000008184b000 0000000000000109 00000000802d8000 0000000000000109 0000000018571ebc 0000037fffb13718 Krnl Code: 000000001857276a: c07000b1f80b larl %r7,0000000019bb1780 0000000018572770: a708000a lhi %r0,10 #0000000018572774: e78950000c36 vlm %v24,%v25,0(%r5),0 >000000001857277a: e7a060000806 vl %v26,0(%r6),0 0000000018572780: e7bf70004c36 vlm %v27,%v31,0(%r7),4 0000000018572786: e70b00000456 vlr %v0,%v27 000000001857278c: e71800000456 vlr %v1,%v24 0000000018572792: e74b00000456 vlr %v4,%v27 Call Trace: [<000000001857277a>] chacha20_vx+0x32/0x818 Last Breaking-Event-Address: [<0000000018571eb6>] chacha20_crypt_s390.constprop.0+0x6e/0xd8 ---[ end trace 0000000000000000 ]--- Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b Fix this by adding a missing MACHINE_HAS_VX check. [agordeev@linux.ibm.com: remove duplicates in commit message]
References
Impacted products
Vendor Product Version
Linux Linux Version: 349d03ffd5f62c298fd667ffa397c3fdc5c6194b
Version: 349d03ffd5f62c298fd667ffa397c3fdc5c6194b
Version: 349d03ffd5f62c298fd667ffa397c3fdc5c6194b
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "arch/s390/crypto/chacha-glue.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "25e8d30507aa2f251152df1af7809e85b5538f4a",
              "status": "affected",
              "version": "349d03ffd5f62c298fd667ffa397c3fdc5c6194b",
              "versionType": "git"
            },
            {
              "lessThan": "debb7797bba0caffdbdadc3e7968bb2c414f50da",
              "status": "affected",
              "version": "349d03ffd5f62c298fd667ffa397c3fdc5c6194b",
              "versionType": "git"
            },
            {
              "lessThan": "8703dd6b238da0ec6c276e53836f8200983d3d9b",
              "status": "affected",
              "version": "349d03ffd5f62c298fd667ffa397c3fdc5c6194b",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "arch/s390/crypto/chacha-glue.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.19"
            },
            {
              "lessThan": "5.19",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.30",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.3.*",
              "status": "unaffected",
              "version": "6.3.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.4",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.30",
                  "versionStartIncluding": "5.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.3.4",
                  "versionStartIncluding": "5.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4",
                  "versionStartIncluding": "5.19",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/crypto: use vector instructions only if available for ChaCha20\n\nCommit 349d03ffd5f6 (\"crypto: s390 - add crypto library interface for\nChaCha20\") added a library interface to the s390 specific ChaCha20\nimplementation. However no check was added to verify if the required\nfacilities are installed before branching into the assembler code.\n\nIf compiled into the kernel, this will lead to the following crash,\nif vector instructions are not available:\n\ndata exception: 0007 ilc:3 [#1] SMP\nModules linked in:\nCPU: 0 PID: 1 Comm: swapper/0 Not tainted 6.3.0-rc7+ #11\nHardware name: IBM 3931 A01 704 (KVM/Linux)\nKrnl PSW : 0704e00180000000 000000001857277a (chacha20_vx+0x32/0x818)\n           R:0 T:1 IO:1 EX:1 Key:0 M:1 W:0 P:0 AS:3 CC:2 PM:0 RI:0 EA:3\nKrnl GPRS: 0000037f0000000a ffffffffffffff60 000000008184b000 0000000019f5c8e6\n           0000000000000109 0000037fffb13c58 0000037fffb13c78 0000000019bb1780\n           0000037fffb13c58 0000000019f5c8e6 000000008184b000 0000000000000109\n           00000000802d8000 0000000000000109 0000000018571ebc 0000037fffb13718\nKrnl Code: 000000001857276a: c07000b1f80b        larl    %r7,0000000019bb1780\n           0000000018572770: a708000a            lhi     %r0,10\n          #0000000018572774: e78950000c36        vlm     %v24,%v25,0(%r5),0\n          \u003e000000001857277a: e7a060000806        vl      %v26,0(%r6),0\n           0000000018572780: e7bf70004c36        vlm     %v27,%v31,0(%r7),4\n           0000000018572786: e70b00000456        vlr     %v0,%v27\n           000000001857278c: e71800000456        vlr     %v1,%v24\n           0000000018572792: e74b00000456        vlr     %v4,%v27\nCall Trace:\n [\u003c000000001857277a\u003e] chacha20_vx+0x32/0x818\nLast Breaking-Event-Address:\n [\u003c0000000018571eb6\u003e] chacha20_crypt_s390.constprop.0+0x6e/0xd8\n---[ end trace 0000000000000000 ]---\nKernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b\n\nFix this by adding a missing MACHINE_HAS_VX check.\n\n[agordeev@linux.ibm.com: remove duplicates in commit message]"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-10-22T13:23:40.798Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/25e8d30507aa2f251152df1af7809e85b5538f4a"
        },
        {
          "url": "https://git.kernel.org/stable/c/debb7797bba0caffdbdadc3e7968bb2c414f50da"
        },
        {
          "url": "https://git.kernel.org/stable/c/8703dd6b238da0ec6c276e53836f8200983d3d9b"
        }
      ],
      "title": "s390/crypto: use vector instructions only if available for ChaCha20",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53702",
    "datePublished": "2025-10-22T13:23:40.798Z",
    "dateReserved": "2025-10-22T13:21:37.345Z",
    "dateUpdated": "2025-10-22T13:23:40.798Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-53702\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-10-22T14:15:44.760\",\"lastModified\":\"2025-10-22T21:12:48.953\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ns390/crypto: use vector instructions only if available for ChaCha20\\n\\nCommit 349d03ffd5f6 (\\\"crypto: s390 - add crypto library interface for\\nChaCha20\\\") added a library interface to the s390 specific ChaCha20\\nimplementation. However no check was added to verify if the required\\nfacilities are installed before branching into the assembler code.\\n\\nIf compiled into the kernel, this will lead to the following crash,\\nif vector instructions are not available:\\n\\ndata exception: 0007 ilc:3 [#1] SMP\\nModules linked in:\\nCPU: 0 PID: 1 Comm: swapper/0 Not tainted 6.3.0-rc7+ #11\\nHardware name: IBM 3931 A01 704 (KVM/Linux)\\nKrnl PSW : 0704e00180000000 000000001857277a (chacha20_vx+0x32/0x818)\\n           R:0 T:1 IO:1 EX:1 Key:0 M:1 W:0 P:0 AS:3 CC:2 PM:0 RI:0 EA:3\\nKrnl GPRS: 0000037f0000000a ffffffffffffff60 000000008184b000 0000000019f5c8e6\\n           0000000000000109 0000037fffb13c58 0000037fffb13c78 0000000019bb1780\\n           0000037fffb13c58 0000000019f5c8e6 000000008184b000 0000000000000109\\n           00000000802d8000 0000000000000109 0000000018571ebc 0000037fffb13718\\nKrnl Code: 000000001857276a: c07000b1f80b        larl    %r7,0000000019bb1780\\n           0000000018572770: a708000a            lhi     %r0,10\\n          #0000000018572774: e78950000c36        vlm     %v24,%v25,0(%r5),0\\n          \u003e000000001857277a: e7a060000806        vl      %v26,0(%r6),0\\n           0000000018572780: e7bf70004c36        vlm     %v27,%v31,0(%r7),4\\n           0000000018572786: e70b00000456        vlr     %v0,%v27\\n           000000001857278c: e71800000456        vlr     %v1,%v24\\n           0000000018572792: e74b00000456        vlr     %v4,%v27\\nCall Trace:\\n [\u003c000000001857277a\u003e] chacha20_vx+0x32/0x818\\nLast Breaking-Event-Address:\\n [\u003c0000000018571eb6\u003e] chacha20_crypt_s390.constprop.0+0x6e/0xd8\\n---[ end trace 0000000000000000 ]---\\nKernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b\\n\\nFix this by adding a missing MACHINE_HAS_VX check.\\n\\n[agordeev@linux.ibm.com: remove duplicates in commit message]\"}],\"metrics\":{},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/25e8d30507aa2f251152df1af7809e85b5538f4a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/8703dd6b238da0ec6c276e53836f8200983d3d9b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/debb7797bba0caffdbdadc3e7968bb2c414f50da\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.