CVE-2023-53256

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

firmware: arm_ffa: Fix FFA device names for logical partitions

Each physical partition can provide multiple services each with UUID.

Each such service can be presented as logical partition with a unique

combination of VM ID and UUID. The number of distinct UUID in a system

will be less than or equal to the number of logical partitions.

However, currently it fails to register more than one logical partition

or service within a physical partition as the device name contains only

VM ID while both VM ID and UUID are maintained in the partition information.

The kernel complains with the below message:

| sysfs: cannot create duplicate filename '/devices/arm-ffa-8001'

| CPU: 1 PID: 1 Comm: swapper/0 Not tainted 6.3.0-rc7 #8

| Hardware name: FVP Base RevC (DT)

| Call trace:

| dump_backtrace+0xf8/0x118

| show_stack+0x18/0x24

| dump_stack_lvl+0x50/0x68

| dump_stack+0x18/0x24

| sysfs_create_dir_ns+0xe0/

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References