CVE-2023-52453

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52453
In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: Update migration data pointer correctly on saving/resume When the optional PRE_COPY support was added to speed up the device compatibility check, it failed to update the saving/resuming data pointers based on the fd offset. This results in migration data corruption and when the device gets started on the destination the following error is reported in some cases, [ 478.907684] arm-smmu-v3 arm-smmu-v3.2.auto: event 0x10 received: [ 478.913691] arm-smmu-v3 arm-smmu-v3.2.auto: 0x0000310200000010 [ 478.919603] arm-smmu-v3 arm-smmu-v3.2.auto: 0x000002088000007f [ 478.925515] arm-smmu-v3 arm-smmu-v3.2.auto: 0x0000000000000000 [ 478.931425] arm-smmu-v3 arm-smmu-v3.2.auto: 0x0000000000000000 [ 478.947552] hisi_zip 0000:31:00.0: qm_axi_rresp [error status=0x1] found [ 478.955930] hisi_zip 0000:31:00.0: qm_db_timeout [error status=0x400] found [ 478.955944] hisi_zip 0000:31:00.0: qm sq doorbell timeout in function 2

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/45f80b2f230df10600e6fa1b83b28bf1c334185e Patch
https://git.kernel.org/stable/c/6bda81e24a35a856f58e6a5786de579b07371603 Patch
https://git.kernel.org/stable/c/be12ad45e15b5ee0e2526a50266ba1d295d26a88 Patch
https://git.kernel.org/stable/c/45f80b2f230df10600e6fa1b83b28bf1c334185e Patch
https://git.kernel.org/stable/c/6bda81e24a35a856f58e6a5786de579b07371603 Patch
https://git.kernel.org/stable/c/be12ad45e15b5ee0e2526a50266ba1d295d26a88 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

12 Dec 2024, 15:37

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/45f80b2f230df10600e6fa1b83b28bf1c334185e - () https://git.kernel.org/stable/c/45f80b2f230df10600e6fa1b83b28bf1c334185e - Patch
References () https://git.kernel.org/stable/c/6bda81e24a35a856f58e6a5786de579b07371603 - () https://git.kernel.org/stable/c/6bda81e24a35a856f58e6a5786de579b07371603 - Patch
References () https://git.kernel.org/stable/c/be12ad45e15b5ee0e2526a50266ba1d295d26a88 - () https://git.kernel.org/stable/c/be12ad45e15b5ee0e2526a50266ba1d295d26a88 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux

21 Nov 2024, 08:39

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/45f80b2f230df10600e6fa1b83b28bf1c334185e - () https://git.kernel.org/stable/c/45f80b2f230df10600e6fa1b83b28bf1c334185e -
References () https://git.kernel.org/stable/c/6bda81e24a35a856f58e6a5786de579b07371603 - () https://git.kernel.org/stable/c/6bda81e24a35a856f58e6a5786de579b07371603 -
References () https://git.kernel.org/stable/c/be12ad45e15b5ee0e2526a50266ba1d295d26a88 - () https://git.kernel.org/stable/c/be12ad45e15b5ee0e2526a50266ba1d295d26a88 -
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: hisi_acc_vfio_pci: actualiza correctamente el puntero de datos de migración al guardar/reanudar Cuando se agregó el soporte PRE_COPY opcional para acelerar la verificación de compatibilidad del dispositivo, no se pudieron actualizar los punteros de datos de guardado/reanudación según el desplazamiento fd. Esto da como resultado la corrupción de los datos de migración y cuando el dispositivo se inicia en el destino, en algunos casos se informa el siguiente error, [ 478.907684] arm-smmu-v3 arm-smmu-v3.2.auto: event 0x10 received: [ 478.913691] arm-smmu-v3 arm-smmu-v3.2.auto: 0x0000310200000010 [ 478.919603] arm-smmu-v3 arm-smmu-v3.2.auto: 0x000002088000007f [ 478.925515] arm-smmu-v3 arm-smmu-v3.2.auto: 0x0000000000000000 [ 478.931425] arm-smmu-v3 arm-smmu-v3.2.auto: 0x0000000000000000 [ 478.947552] hisi_zip 0000:31:00.0: qm_axi_rresp [error status=0x1] found [ 478.955930] hisi_zip 0000:31:00.0: qm_db_timeout [error status=0x400] found [ 478.955944] hisi_zip 0000:31:00.0: qm sq doorbell timeout in function 2

23 Feb 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-23 15:15

Updated : 2024-12-12 15:37

NVD link : CVE-2023-52453

Mitre link : CVE-2023-52453

CVE.ORG link : CVE-2023-52453

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo