CVE-2023-52453— hisi_acc_vfio_pci: Update migration data pointer correctly on saving/resume
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-52453
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
hisi_acc_vfio_pci: Update migration data pointer correctly on saving/resume
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: Update migration data pointer correctly on saving/resume When the optional PRE_COPY support was added to speed up the device compatibility check, it failed to update the saving/resuming data pointers based on the fd offset. This results in migration data corruption and when the device gets started on the destination the following error is reported in some cases, [ 478.907684] arm-smmu-v3 arm-smmu-v3.2.auto: event 0x10 received: [ 478.913691] arm-smmu-v3 arm-smmu-v3.2.auto: 0x0000310200000010 [ 478.919603] arm-smmu-v3 arm-smmu-v3.2.auto: 0x000002088000007f [ 478.925515] arm-smmu-v3 arm-smmu-v3.2.auto: 0x0000000000000000 [ 478.931425] arm-smmu-v3 arm-smmu-v3.2.auto: 0x0000000000000000 [ 478.947552] hisi_zip 0000:31:00.0: qm_axi_rresp [error status=0x1] found [ 478.955930] hisi_zip 0000:31:00.0: qm_db_timeout [error status=0x400] found [ 478.955944] hisi_zip 0000:31:00.0: qm sq doorbell timeout in function 2
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux Kernel 存在安全漏洞，该漏洞源于当添加可选的 PRE_COPY 支持以加速设备兼容性检查时，hisi_acc_vfio_pci 无法根据 fd 偏移量更新保存/恢复数据指针。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2023-52453
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-52453
请登录查看更多情报信息。
Same Patch Batch · Linux · 2024-02-23 · 19 CVEs total
| CVE-2023-52461 | drm/sched: Fix bounds limiting when given a malformed entity | |
| CVE-2024-26593 | i2c: i801: Fix block process call transactions | |
| CVE-2024-26594 | ksmbd: validate mech token in session setup | |
| CVE-2023-52455 | iommu: Don't reserve 0-length IOVA region | |
| CVE-2023-52454 | nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length | |
| CVE-2023-52456 | serial: imx: fix tx statemachine deadlock | |
| CVE-2023-52458 | block: add check that partition length needs to be aligned with block size | |
| CVE-2023-52457 | serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed | |
| CVE-2023-52459 | media: v4l: async: Fix duplicated list deletion | |
| CVE-2024-26598 | KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache | |
| CVE-2023-52460 | drm/amd/display: Fix NULL pointer dereference at hibernate | |
| CVE-2023-52462 | bpf: fix check for attempt to corrupt spilled pointer | |
| CVE-2023-52464 | EDAC/thunderx: Fix possible out-of-bounds string access | |
| CVE-2023-52463 | efivarfs: force RO when remounting if SetVariable is not supported | |
| CVE-2024-26596 | net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events | |
| CVE-2024-26595 | mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path | |
| CVE-2024-26597 | net: qualcomm: rmnet: fix global oob in rmnet_policy | |
| CVE-2024-26599 | pwm: Fix out-of-bounds access in of_pwm_single_xlate() |
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
Same vendor: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
V. Comments for CVE-2023-52453
No comments yet