CVE-2023-52453

CVE-2023-52453

High · published February 23, 2024

CVSS v3.1
7.1
EPSS
0%
Percentile
12.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

hisi_acc_vfio_pci: Update migration data pointer correctly on saving/resume

When the optional PRE_COPY support was added to speed up the device

compatibility check, it failed to update the saving/resuming data

pointers based on the fd offset. This results in migration data

corruption and when the device gets started on the destination the

following error is reported in some cases,

[ 478.907684] arm-smmu-v3 arm-smmu-v3.2.auto: event 0x10 received:

[ 478.913691] arm-smmu-v3 arm-smmu-v3.2.auto: 0x0000310200000010

[ 478.919603] arm-smmu-v3 arm-smmu-v3.2.auto: 0x000002088000007f

[ 478.925515] arm-smmu-v3 arm-smmu-v3.2.auto: 0x0000000000000000

[ 478.931425] arm-smmu-v3 arm-smmu-v3.2.auto: 0x0000000000000000

[ 478.947552] hisi_zip 0000:31:00.0: qm_axi_rresp [error status=0x1] found

[ 478.955930] hisi_zip 0000:31:00.0: qm_db_timeout [error status=0x400] found

[ 478.955944] hisi_zip 0000:31:00.0: qm sq doorbell timeout in function 2

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00223 · 12.2th percentile
Published
2024-02-23T20:15Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel≥ 6.2, < 6.6.146.6.14
linux/linux_kernel≥ 6.7, < 6.7.26.7.2
References (6)
EPSS history
Timeline
  • 23 FEB 14:46Z
    hisi_acc_vfio_pci: Update migration data pointer correctly on saving/resume
    cvelistv5