CVE-2023-53175: PCI: hv: Fix a crash in hv_pci_restore_msi_msg() during hibernation
In the Linux kernel, the following vulnerability has been resolved:
PCI: hv: Fix a crash in hvpcirestoremsimsg() during hibernation
When a Linux VM with an assigned PCI device runs on Hyper-V, if the PCI device driver is not loaded yet (i.e. MSI-X/MSI is not enabled on the device yet), doing a VM hibernation triggers a panic in hvpcirestoremsimsg() -> msilockdescs(&pdev->dev), because pdev->dev.msi.data is still NULL.
Avoid the panic by checking if MSI-X/MSI is enabled.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53175?
The severity of CVE-2023-53175 is classified as moderate due to the potential for system crashes during hibernation.
How do I fix CVE-2023-53175?
To fix CVE-2023-53175, ensure that you update to the latest version of the Linux kernel where the vulnerability has been patched.
Who is affected by CVE-2023-53175?
CVE-2023-53175 affects Linux virtual machines running on Hyper-V with assigned PCI devices, particularly when the PCI device driver is not loaded.
What kind of systems are vulnerable to CVE-2023-53175?
Systems that are running the Linux kernel with Hyper-V virtualization are vulnerable to CVE-2023-53175.
Can CVE-2023-53175 lead to data loss?
Yes, CVE-2023-53175 can potentially lead to data loss if the system crashes during hibernation due to the vulnerability.