Bug 2225615 (CVE-2023-29932)

Summary:	CVE-2023-29932 llvm: canonicalize pass crashed with segmentation fault
Product:	[Other] Security Response	Reporter:	Marian Rehak <mrehak>
Component:	vulnerability	Assignee:	Nobody <nobody>
Status:	NEW ---	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	dfreiber, jburrell, jchecahi, mprchlik, nboldt, rogbas, sipoyare, tstellar, vkumar
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:	A flaw was found in the llvm package. A segmentation fault via the mlir::IROperand<mlir::OpOperand component may lead to a crash.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2225616, 2225617, 2225618
Bug Blocks:	2193481

Description Marian Rehak 2023-07-25 15:07:23 UTC

llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperand<mlir::OpOperand.

Reference:

https://github.com/llvm/llvm-project/issues/58745

Comment 1 Marian Rehak 2023-07-25 15:07:40 UTC

Created llvm tracking bugs for this issue:

Affects: fedora-all [bug 2225616]

Comment 3 Siddhesh Poyarekar 2023-07-25 15:41:01 UTC

What's the security rationale for this?  If the upstream LLVM security group has agreed on the security impact then this document should be updated to refect that:

https://llvm.org/docs/Security.html#what-is-considered-a-security-issue

because at the moment it states that there are no security-sensitive parts in LLVM.  I couldn't track an upstream discussion about this either.  Likewise for CVE-2023-29933, CVE-2023-29934, CVE-2023-29935, CVE-2023-29941 and CVE-2023-29942.