{"cve":"CVE-2023-52633","nvd":{"published":"2024-04-02T07:15:41.097","modified":"2026-06-17T06:43:13.033","status":"Analyzed","description":"In the Linux kernel, the following vulnerability has been resolved:\n\num: time-travel: fix time corruption\n\nIn 'basic' time-travel mode (without =inf-cpu or =ext), we\nstill get timer interrupts. These can happen at arbitrary\npoints in time, i.e. while in timer_read(), which pushes\ntime forward just a little bit. Then, if we happen to get\nthe interrupt after calculating the new time to push to,\nbut before actually finishing that, the interrupt will set\nthe time to a value that's incompatible with the forward,\nand we'll crash because time goes backwards when we do the\nforwarding.\n\nFix this by reading the time_travel_time, calculating the\nadjustment, and doing the adjustment all with interrupts\ndisabled.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","score":5.0},"cwes":["CWE-787"],"references":["https://git.kernel.org/stable/c/0c7478a2da3f5fe106b4658338873d50c86ac7ab","https://git.kernel.org/stable/c/4f7dad73df4cdb2b7042103d3922745d040ad025","https://git.kernel.org/stable/c/abe4eaa8618bb36c2b33e9cdde0499296a23448c","https://git.kernel.org/stable/c/b427f55e9d4185f6f17cc1e3296eb8d0c4425283","https://git.kernel.org/stable/c/de3e9d8e8d1ae0a4d301109d1ec140796901306c"],"products":["linux:linux_kernel"],"source":"nvd","synced_at":"2026-10-19T21:47:51.568503435+00:00"},"epss":{"cve":"CVE-2023-52633","score":0.00226,"percentile":0.13371,"date":"2026-11-01"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}