CVE-2023-53082

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

vp_vdpa: fix the crash in hot unplug with vp_vdpa

While unplugging the vp_vdpa device, it triggers a kernel panic

The root cause is: vdpa_mgmtdev_unregister() will accesses modern

devices which will cause a use after free.

So need to change the sequence in vp_vdpa_remove

[ 195.003359] BUG: unable to handle page fault for address: ff4e8beb80199014

[ 195.004012] #PF: supervisor read access in kernel mode

[ 195.004486] #PF: error_code(0x0000) - not-present page

[ 195.004960] PGD 100000067 P4D 1001b6067 PUD 1001b7067 PMD 1001b8067 PTE 0

[ 195.005578] Oops: 0000 1 PREEMPT SMP PTI

[ 195.005968] CPU: 13 PID: 164 Comm: kworker/u56:10 Kdump: loaded Not tainted 5.14.0-252.el9.x86_64 #1

[ 195.006792] Hardware name: Red Hat KVM/RHEL, BIOS edk2-20221207gitfff6d81270b5-2.el9 unknown

[ 195.007556] Workqueue: kacpi_hotplug acpi_hotplug_work_fn

[ 195.008059] RIP: 0010:ioread8+0x31/0x80

[ 195.008418] Code: 77 28 48 81 ff 00

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References