CVE-2023-5158: Possible dos from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.c

Q: What is CVE-2023-5158?

CVE-2023-5158 is a vulnerability that affects the vringh_kiov_advance function in the host side of a virtio ring in the Linux Kernel.

Q: How severe is CVE-2023-5158?

CVE-2023-5158 has a severity rating of 6.5, which is considered medium.

Q: What is the affected software of CVE-2023-5158?

The affected software of CVE-2023-5158 is the Linux Kernel version up to but excluding 5.13.

Q: What is the impact of CVE-2023-5158?

CVE-2023-5158 may result in a denial of service from guest to host via zero length descriptor.

Q: How can the CVE-2023-5158 vulnerability be fixed?

To fix the CVE-2023-5158 vulnerability, update the Linux Kernel to version 5.13 or later.

Published Sep 25, 2023

Updated

A flaw was found in vringhkiovadvance in drivers/vhost/vringh.c in the host side of a virtio ring in the Linux Kernel. This issue may result in a denial of service from guest to host via zero length descriptor.

Other sources

A possible DOS from guest to host via zero length descriptor. This is because currently the vringhkiovadvance() did something like this:

while (len && iov->i < iov->used) { ... if (!iov->iov[iov->i].iovlen) { ... iov->i++; } }

When the length of the descriptor is zero, we miss the chance to advance iov->i.

The fix is to revert b8c06ad4d67db56ed6bdfb685c134da74e92a2c7 ("vringh: implement vringhkiovadvance()").

— Red Hat

Affected Software

104 affected componentsFixes available

Linux Linux kernel<=5.12.19

debian/linux

5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1

redhat/kernel<5.13

5.13

ubuntu/linux-hwe-edge*

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-azure*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-oem*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-aws-5.15<5.15.0-1051.56~20.04.1

5.15.0-1051.56~20.04.1

ubuntu/linux-azure-5.15<5.15.0-1053.61~20.04.1

5.15.0-1053.61~20.04.1

ubuntu/linux-gcp-5.15<5.15.0-1048.56~20.04.1

5.15.0-1048.56~20.04.1

ubuntu/linux-gkeop-5.15<5.15.0-1034.40~20.04.1

5.15.0-1034.40~20.04.1

ubuntu/linux-hwe-5.15<5.15.0-91.101~20.04.1

5.15.0-91.101~20.04.1

ubuntu/linux-ibm-5.15<5.15.0-1044.47~20.04.1

5.15.0-1044.47~20.04.1

ubuntu/linux-intel-iotg-5.15<5.15.0-1046.52~20.04.1

5.15.0-1046.52~20.04.1

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-91.101~20.04.1

5.15.0-91.101~20.04.1

ubuntu/linux-nvidia-tegra-5.15<5.15.0-1020.20~20.04.1

5.15.0-1020.20~20.04.1

ubuntu/linux-oracle-5.15<5.15.0-1049.55~20.04.1

5.15.0-1049.55~20.04.1

ubuntu/linux-riscv-5.15<5.15.0-1047.51~20.04.1

5.15.0-1047.51~20.04.1

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux<5.15.0-91.101

5.15.0-91.101

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1051.56

5.15.0-1051.56

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2<6.2.0-1017.17~22.04.1

6.2.0-1017.17~22.04.1

ubuntu/linux-aws-6.5*

ubuntu/linux-azure<5.15.0-1053.61

5.15.0-1053.61

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2<6.2.0-1018.18~22.04.1

6.2.0-1018.18~22.04.1

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-fde<5.15.0-1053.61.1

5.15.0-1053.61.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2<6.2.0-1018.18~22.04.1.1

6.2.0-1018.18~22.04.1.1

ubuntu/linux-gcp<5.15.0-1048.56

5.15.0-1048.56

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2<6.2.0-1021.23~22.04.1

6.2.0-1021.23~22.04.1

ubuntu/linux-gke<5.15.0-1048.53

5.15.0-1048.53

ubuntu/linux-gkeop<5.15.0-1034.40

5.15.0-1034.40

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2<6.2.0-39.40~22.04.1

6.2.0-39.40~22.04.1

ubuntu/linux-ibm<5.15.0-1044.47

5.15.0-1044.47

ubuntu/linux-intel-iotg<5.15.0-1046.52

5.15.0-1046.52

ubuntu/linux-kvm<5.15.0-1048.53

5.15.0-1048.53

ubuntu/linux-lowlatency<5.15.0-91.101

5.15.0-91.101

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2<6.2.0-1018.18~22.04.1

6.2.0-1018.18~22.04.1

ubuntu/linux-nvidia<5.15.0-1042.42

5.15.0-1042.42

ubuntu/linux-nvidia-6.2<6.2.0-1013.13

6.2.0-1013.13

ubuntu/linux-nvidia-6.5<6.5.0-1007.7

6.5.0-1007.7

ubuntu/linux-nvidia-tegra<5.15.0-1020.20

5.15.0-1020.20

ubuntu/linux-nvidia-tegra-igx<5.15.0-1007.7

5.15.0-1007.7

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1<6.1.0-1025.25

6.1.0-1025.25

ubuntu/linux-oem-6.5<6.5.0-1009.10

6.5.0-1009.10

ubuntu/linux-oracle<5.15.0-1049.55

5.15.0-1049.55

ubuntu/linux-raspi<5.15.0-1044.47

5.15.0-1044.47

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-xilinx-zynqmp<5.15.0-1027.31

5.15.0-1027.31

ubuntu/linux-bluefield<5.15.0-1033.35

5.15.0-1033.35

ubuntu/linux-intel-iot-realtime<5.15.0-1044.46

5.15.0-1044.46

ubuntu/linux-realtime<5.15.0-1052.58

5.15.0-1052.58

ubuntu/linux-fips*

ubuntu/linux-raspi-realtime*

ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Upgrade
Upgrade redhat/kernel to a version that resolves this vulnerability.
Fixed in 5.13
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1051.56~20.04.1
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1053.61~20.04.1
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1048.56~20.04.1
Upgrade
Upgrade ubuntu/linux-gkeop-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1034.40~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-91.101~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1044.47~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1046.52~20.04.1
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-91.101~20.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1020.20~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1049.55~20.04.1
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1047.51~20.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-91.101
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1051.56
Upgrade
Upgrade ubuntu/linux-aws-6.2 to a version that resolves this vulnerability.
Fixed in 6.2.0-1017.17~22.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1053.61
Upgrade
Upgrade ubuntu/linux-azure-6.2 to a version that resolves this vulnerability.
Fixed in 6.2.0-1018.18~22.04.1
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1053.61.1
Upgrade
Upgrade ubuntu/linux-azure-fde-6.2 to a version that resolves this vulnerability.
Fixed in 6.2.0-1018.18~22.04.1.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1048.56
Upgrade
Upgrade ubuntu/linux-gcp-6.2 to a version that resolves this vulnerability.
Fixed in 6.2.0-1021.23~22.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1048.53
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1034.40
Upgrade
Upgrade ubuntu/linux-hwe-6.2 to a version that resolves this vulnerability.
Fixed in 6.2.0-39.40~22.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1044.47
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1046.52
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1048.53
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-91.101
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-6.2 to a version that resolves this vulnerability.
Fixed in 6.2.0-1018.18~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1042.42
Upgrade
Upgrade ubuntu/linux-nvidia-6.2 to a version that resolves this vulnerability.
Fixed in 6.2.0-1013.13
Upgrade
Upgrade ubuntu/linux-nvidia-6.5 to a version that resolves this vulnerability.
Fixed in 6.5.0-1007.7
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 5.15.0-1020.20
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.
Fixed in 5.15.0-1007.7
Upgrade
Upgrade ubuntu/linux-oem-6.1 to a version that resolves this vulnerability.
Fixed in 6.1.0-1025.25
Upgrade
Upgrade ubuntu/linux-oem-6.5 to a version that resolves this vulnerability.
Fixed in 6.5.0-1009.10
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1049.55
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1044.47
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.15.0-1027.31
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1033.35
Upgrade
Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1044.46
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1052.58
Upgrade
Upgrade Linux Kernel to a version that resolves this vulnerability.
Patch b8c06ad4d67db56ed6bdfb685c134da74e92a2c7

Event History

Sep 25, 2023

Data Sourced

via Red Hat·09:20 AM

DescriptionSeverityAffected Software

CVE Published

via MITRE·03:55 PM

Data Sourced

via MITRE·03:55 PM

DescriptionSeverityWeakness

Data Sourced

via OSV·04:15 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is CVE-2023-5158?

CVE-2023-5158 is a vulnerability that affects the vringh_kiov_advance function in the host side of a virtio ring in the Linux Kernel.

How severe is CVE-2023-5158?

CVE-2023-5158 has a severity rating of 6.5, which is considered medium.

What is the affected software of CVE-2023-5158?

The affected software of CVE-2023-5158 is the Linux Kernel version up to but excluding 5.13.

What is the impact of CVE-2023-5158?

CVE-2023-5158 may result in a denial of service from guest to host via zero length descriptor.

How can the CVE-2023-5158 vulnerability be fixed?

To fix the CVE-2023-5158 vulnerability, update the Linux Kernel to version 5.13 or later.

CVE-2023-5158: Possible dos from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.c

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

What is CVE-2023-5158?

How severe is CVE-2023-5158?

What is the affected software of CVE-2023-5158?

What is the impact of CVE-2023-5158?

How can the CVE-2023-5158 vulnerability be fixed?

Company

Resources

Contact