CVE-2023-53273

Drivers: vmbus: Check for channel allocation before looking up relids

Medium · published September 16, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
4.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

Drivers: vmbus: Check for channel allocation before looking up relids

relid2channel() assumes vmbus channel array to be allocated when called.

However, in cases such as kdump/kexec, not all relids will be reset by the host.

When the second kernel boots and if the guest receives a vmbus interrupt during

vmbus driver initialization before vmbus_connect() is called, before it finishes,

or if it fails, the vmbus interrupt service routine is called which in turn calls

relid2channel() and can cause a null pointer dereference.

Print a warning and error out in relid2channel() for a channel id that's invalid

in the second kernel.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00159 · 4.7th percentile
Published
2025-09-16T08:11Z
EPSS history
Timeline
  • 16 SEP 08:11Z
    Drivers: vmbus: Check for channel allocation before looking up relids
    cvelistv5