CVE-2023-53702
Linux Kernel vulnerability analysis and mitigation

Overview

In the Linux kernel, a vulnerability was discovered related to the s390/crypto implementation of ChaCha20. The issue stems from commit 349d03ffd5f6 which added a library interface to the s390-specific ChaCha20 implementation without properly checking if the required vector facilities were available before executing vector instructions (NVD).

Technical details

The vulnerability occurs when the ChaCha20 implementation attempts to use vector instructions without verifying their availability on the system. When compiled into the kernel, this leads to a data exception (0007 ilc:3) if vector instructions are not available on the system. The issue specifically manifests in the chacha20vx function where vector load multiple (vlm) and vector load (vl) instructions are executed without the prerequisite MACHINEHAS_VX check (NVD).

Impact

When triggered, this vulnerability results in a kernel panic with the message "Attempted to kill init!" This can cause system crashes and potential denial of service on affected systems running the vulnerable kernel version (NVD).

Mitigation and workarounds

The vulnerability has been resolved by adding a missing MACHINEHASVX check to verify the availability of vector instructions before their use (NVD).

Additional resources


SourceThis report was generated using AI

Related Linux Kernel vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-40258HIGH7
  • Linux KernelLinux Kernel
  • kernel-rt-64k-debug-devel-matched
NoNoDec 04, 2025
CVE-2025-40259MEDIUM6.2
  • Linux KernelLinux Kernel
  • kernel-rt-64k
NoNoDec 04, 2025
CVE-2025-40264MEDIUM5.5
  • Linux KernelLinux Kernel
  • kernel-64k-modules-extra
NoNoDec 04, 2025
CVE-2025-40254MEDIUM5.5
  • Linux KernelLinux Kernel
  • kernel-64k-devel-matched
NoNoDec 04, 2025
CVE-2025-40253MEDIUM5.5
  • Linux KernelLinux Kernel
  • kernel-64k-debug-modules-partner
NoNoDec 04, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management