CVE-2023-52994

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

acpi: Fix suspend with Xen PV

Commit f1e525009493 ("x86/boot: Skip realmode init code when running as

Xen PV guest") missed one code path accessing real_mode_header, leading

to dereferencing NULL when suspending the system under Xen:

[ 348.284004] PM: suspend entry (deep)

[ 348.289532] Filesystems sync: 0.005 seconds

[ 348.291545] Freezing user space processes ... (elapsed 0.000 seconds) done.

[ 348.292457] OOM killer disabled.

[ 348.292462] Freezing remaining freezable tasks ... (elapsed 0.104 seconds) done.

[ 348.396612] printk: Suspending console(s) (use no_console_suspend to debug)

[ 348.749228] PM: suspend devices took 0.352 seconds

[ 348.769713] ACPI: EC: interrupt blocked

[ 348.816077] BUG: kernel NULL pointer dereference, address: 000000000000001c

[ 348.816080] #PF: supervisor read access in kernel mode

[ 348.816081] #PF: error_code(0x0000) - not-present

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References