{"id":"CVE-2023-53331","summary":"pstore/ram: Check start of empty przs during init","details":"In the Linux kernel, the following vulnerability has been resolved:\n\npstore/ram: Check start of empty przs during init\n\nAfter commit 30696378f68a (\"pstore/ram: Do not treat empty buffers as\nvalid\"), initialization would assume a prz was valid after seeing that\nthe buffer_size is zero (regardless of the buffer start position). This\nunchecked start value means it could be outside the bounds of the buffer,\nleading to future access panics when written to:\n\n sysdump_panic_event+0x3b4/0x5b8\n atomic_notifier_call_chain+0x54/0x90\n panic+0x1c8/0x42c\n die+0x29c/0x2a8\n die_kernel_fault+0x68/0x78\n __do_kernel_fault+0x1c4/0x1e0\n do_bad_area+0x40/0x100\n do_translation_fault+0x68/0x80\n do_mem_abort+0x68/0xf8\n el1_da+0x1c/0xc0\n __raw_writeb+0x38/0x174\n __memcpy_toio+0x40/0xac\n persistent_ram_update+0x44/0x12c\n persistent_ram_write+0x1a8/0x1b8\n ramoops_pstore_write+0x198/0x1e8\n pstore_console_write+0x94/0xe0\n ...\n\nTo avoid this, also check if the prz start is 0 during the initialization\nphase. If not, the next prz sanity check case will discover it (start \u003e\nsize) and zap the buffer back to a sane state.\n\n[kees: update commit log with backtrace and clarifications]","modified":"2026-04-02T09:44:01.448077Z","published":"2025-09-16T16:12:06.788Z","related":["SUSE-SU-2025:03600-1","SUSE-SU-2025:03614-1","SUSE-SU-2025:03615-1","SUSE-SU-2025:03628-1","SUSE-SU-2025:03634-1","SUSE-SU-2025:20851-1","SUSE-SU-2025:20861-1","SUSE-SU-2025:20870-1","SUSE-SU-2025:20898-1","SUSE-SU-2025:3716-1","SUSE-SU-2025:3751-1","SUSE-SU-2025:3761-1","SUSE-SU-2025:4057-1","SUSE-SU-2025:4132-1","SUSE-SU-2025:4141-1"],"database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53331.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/25fb4e3402d46f425ec135ef6f09792a4c1b3003"},{"type":"WEB","url":"https://git.kernel.org/stable/c/89312657337e6e03ad6e9ea1a462bd9c158c85c8"},{"type":"WEB","url":"https://git.kernel.org/stable/c/c807ccdd812d18985860504b503899f3140a9549"},{"type":"WEB","url":"https://git.kernel.org/stable/c/dc2f60de9a7d3efd982440117dab5579898d808c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e95d7a8a6edd14f8fab44c777dd7281db91f6ae2"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e972231db29b5d1dccc13bf9d5ba55b6979a69ed"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f77990358628b01bdc03752126ff5f716ea37615"},{"type":"WEB","url":"https://git.kernel.org/stable/c/fe8c3623ab06603eb760444a032d426542212021"},{"type":"WEB","url":"https://git.kernel.org/stable/c/fedecaeef88899d940b69368c996e8b3b0b8650d"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53331.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53331"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"e1e3a46706bd4037e8b7407dc660ae6e05b8ac56"},{"fixed":"89312657337e6e03ad6e9ea1a462bd9c158c85c8"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"265242d82a3c6a8bd9120d06b4801f8d7ae9a346"},{"fixed":"c807ccdd812d18985860504b503899f3140a9549"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"30696378f68a9e3dad6bfe55938b112e72af00c2"},{"fixed":"e972231db29b5d1dccc13bf9d5ba55b6979a69ed"},{"fixed":"dc2f60de9a7d3efd982440117dab5579898d808c"},{"fixed":"fedecaeef88899d940b69368c996e8b3b0b8650d"},{"fixed":"e95d7a8a6edd14f8fab44c777dd7281db91f6ae2"},{"fixed":"f77990358628b01bdc03752126ff5f716ea37615"},{"fixed":"25fb4e3402d46f425ec135ef6f09792a4c1b3003"},{"fixed":"fe8c3623ab06603eb760444a032d426542212021"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"0"},{"last_affected":"ec7f99261da9a20d63cbd273511a11a2efe698f2"},{"last_affected":"f250e4c562a3bd106575032666e9ef46f31231f8"},{"last_affected":"fffdbf586866e9500b53c9d4b061d3983720375a"},{"last_affected":"9e969ba431b46b1891c88cea36f722f3bfe8a180"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53331.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}