PatchTheCVEllvm vulnerabilities
Recent CVEs affecting llvm products. 8 tracked.
llvm has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-05-05. Highest priority: CVE-2023-26924 (score 31/100).
- CVE-2023-29942 MEDIUM 5.5 DOWNGRADE llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::Type::isa<
- CVE-2023-29941 MEDIUM 5.5 DOWNGRADE llvm-project commit a0138390 was discovered to contain a segmentation fault via the component matchAndRewriteS
- CVE-2023-29939 MEDIUM 5.5 DOWNGRADE llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::spirv::Tar
- CVE-2023-29935 MEDIUM 5.5 DOWNGRADE llvm-project commit a0138390 was discovered to contain an assertion failure at !replacements.count(op) && "ope
- CVE-2023-29934 MEDIUM 5.5 DOWNGRADE llvm-project commit 6c01b5c was discovered to contain a segmentation fault via the component mlir::Type::getDi
- CVE-2023-29933 MEDIUM 5.5 DOWNGRADE llvm-project commit bd456297 was discovered to contain a segmentation fault via the component mlir::Block::get
- CVE-2023-29932 MEDIUM 5.5 DOWNGRADE llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperand<
- CVE-2023-26924 MEDIUM 5.5 DOWNGRADE LLVM a0dab4950 has a segmentation fault in mlir::outlineSingleBlockRegion
FAQ
How do I fix llvm vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is llvm being exploited right now?
None of the tracked llvm CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which llvm CVE should I patch first?
CVE-2023-26924 currently ranks highest (31/100): LLVM a0dab4950 has a segmentation fault in mlir::outlineSingleBlockRegion.