CVE-2023-52598: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-52598 is a vulnerability in the Linux kernel's s390/ptrace subsystem, discovered and disclosed on March 6, 2024. The vulnerability affects the handling of floating point control (fpc) register settings in the ptrace interface, impacting Linux kernel versions up to 4.19.307, 4.20-5.4.269, 5.5-5.10.210, 5.11-5.15.149, 5.16-6.1.77, 6.2-6.6.16, and 6.7-6.7.4 (NVD).

The vulnerability occurs when modifying the floating point control (fpc) register of a traced process through the ptrace interface. When testing the validity of a new value by temporarily loading it into the fpc register, an interrupt can cause corruption of the fpc register of the tracing process. If floating point or vector registers are used within the interrupt context, the current fp/vx registers are saved with save_fpu_regs() assuming they belong to user space. While test_fp_ctl() restores the original user space fpc register value, it gets discarded when returning to user space. The vulnerability has been assigned a CVSS v3.1 base score of 7.1 HIGH (NVD).

The vulnerability results in the tracer incorrectly continuing to run with the value that was supposed to be used for the traced process, potentially leading to corruption of the floating point control register. This can affect system stability and potentially lead to denial of service or information disclosure (NVD).

The vulnerability requires local access and low privileges to exploit. It has been classified as having low attack complexity with no user interaction required, as indicated by the CVSS vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H (NVD).

The vulnerability has been fixed by saving fpu register contents with save_fpu_regs() before using test_fp_ctl(). The fix has been implemented in various kernel versions through patches. System administrators should update their Linux kernel to the latest patched version (Kernel Patch).