CVE-2023-52453: hisi_acc_vfio_pci: Update migration data pointer correctly on saving/resume
In the Linux kernel, the following vulnerability has been resolved:
hisiaccvfiopci: Update migration data pointer correctly on saving/resume
When the optional PRECOPY support was added to speed up the device compatibility check, it failed to update the saving/resuming data pointers based on the fd offset. This results in migration data corruption and when the device gets started on the destination the following error is reported in some cases,
[ 478.907684] arm-smmu-v3 arm-smmu-v3.2.auto: event 0x10 received: [ 478.913691] arm-smmu-v3 arm-smmu-v3.2.auto: 0x0000310200000010 [ 478.919603] arm-smmu-v3 arm-smmu-v3.2.auto: 0x000002088000007f [ 478.925515] arm-smmu-v3 arm-smmu-v3.2.auto: 0x0000000000000000 [ 478.931425] arm-smmu-v3 arm-smmu-v3.2.auto: 0x0000000000000000 [ 478.947552] hisizip 0000:31:00.0: qmaxirresp [error status=0x1] found [ 478.955930] hisizip 0000:31:00.0: qmdbtimeout [error status=0x400] found [ 478.955944] hisizip 0000:31:00.0: qm sq doorbell timeout in function 2
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52453?
CVE-2023-52453 has a high severity level due to its potential impact on the Linux kernel's migration data handling.
How do I fix CVE-2023-52453?
To resolve CVE-2023-52453, you should update the Linux kernel to a version that includes the fix, such as 6.6.15 or higher.
Which versions of the Linux kernel are affected by CVE-2023-52453?
CVE-2023-52453 affects Linux kernel versions between 6.2 and 6.6.14, as well as specific versions in the 6.7 series.
What type of vulnerability is CVE-2023-52453?
CVE-2023-52453 is a migration data handling vulnerability found in the Linux kernel related to device compatibility during virtual machine operations.
Is there a specific patch for CVE-2023-52453?
Yes, there are specific kernel patches available that address CVE-2023-52453, included in recent kernel updates.