CVE-2023-53245

scsi: storvsc: Fix handling of virtual Fibre Channel timeouts

Medium · published September 15, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
3.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

scsi: storvsc: Fix handling of virtual Fibre Channel timeouts

Hyper-V provides the ability to connect Fibre Channel LUNs to the host

system and present them in a guest VM as a SCSI device. I/O to the vFC

device is handled by the storvsc driver. The storvsc driver includes a

partial integration with the FC transport implemented in the generic

portion of the Linux SCSI subsystem so that FC attributes can be displayed

in /sys. However, the partial integration means that some aspects of vFC

don't work properly. Unfortunately, a full and correct integration isn't

practical because of limitations in what Hyper-V provides to the guest.

In particular, in the context of Hyper-V storvsc, the FC transport timeout

function fc_eh_timed_out() causes a kernel panic because it can't find the

rport and dereferences a NULL pointer. The original patch that added the

call from storvsc_eh_timed_out() to fc_eh_timed_out() is faulty in this

regard.

In many cases a timeout is due to a transient condition, so the situation

can be improved by just continuing to wait like with other I/O requests

issued by storvsc, and avoiding the guaranteed panic. For a permanent

failure, continuing to wait may result in a hung thread instead of a panic,

which again may be better.

So fix the panic by removing the storvsc call to fc_eh_timed_out(). This

allows storvsc to keep waiting for a response. The change has been tested

by users who experienced a panic in fc_eh_timed_out() due to transient

timeouts, and it solves their problem.

In the future we may want to deprecate the vFC functionality in storvsc

since it can't be fully fixed. But it has current users for whom it is

working well enough, so it should probably stay for a while longer.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00149 · 3.7th percentile
Published
2025-09-15T14:46Z
EPSS history
Timeline
  • 15 SEP 14:46Z
    scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
    cvelistv5