CVE-2023-52482

x86/srso: Add SRSO mitigation for Hygon processors

HIGH

7.8

CVSS Score

Published: February 29, 2024 at 05:43 AM UTC

Updated: June 17, 2026 at 06:42 AM UTC

2 products affected across 2 vendorsLinux KernelDebian Linux

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.3%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: x86/srso: Add SRSO mitigation for Hygon processors Add mitigation for the speculative return stack overflow vulnerability which exists on Hygon processors too.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

10.0

Linux Kernel · Linux

95%

4.20 ≤ v < 5.10.2154.20 ≤ v < 5.15.1344.20 ≤ v < 6.1.564.20 ≤ v < 6.5.64.20 ≤ v < 6.65.10.189 ≤ v < 5.10.2155.15.125 ≤ v < 5.15.1346.1.44 ≤ v < 6.1.566.4.9 ≤ v < 6.5.66.6 rc1 6.6 rc2 6.6 rc3c9661c1e80b609cd038db7c908e061f0535804ef

Vendor states this is fixed in 6ce2f297a7168274547d0b5aea6c7c16268b8a96 (fixed)

Vendor states this is fixed in a5ef7d68cea1344cf524f04981c2b3f80bedbb0d (fixed)

Vendor states this is fixed in cf43b304b6952b549d58feabc342807b334f03d4 (fixed)

Vendor states this is fixed in e7ea043bc3f19473561c08565047b3f1671bf35d (fixed)

Vendor states this is fixed in f090a8b4d2e3ec6f318d6fdab243a2edc5a8cc37 (fixed)

Vendor states this is fixed in 4.20 (unaffected)

Vendor states this is fixed in 5.10.215 (unaffected)

Vendor states this is fixed in 5.15.134 (unaffected)

Vendor states this is fixed in 6.1.56 (unaffected)

Vendor states this is fixed in 6.5.6 (unaffected)

Vendor states this is fixed in 6.6 (unaffected)