CVE-2023-53383

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4

The T241 platform suffers from the T241-FABRIC-4 erratum which causes

unexpected behavior in the GIC when multiple transactions are received

simultaneously from different sources. This hardware issue impacts

NVIDIA server platforms that use more than two T241 chips

interconnected. Each chip has support for 320 {E}SPIs.

This issue occurs when multiple packets from different GICs are

incorrectly interleaved at the target chip. The erratum text below

specifies exactly what can cause multiple transfer packets susceptible

to interleaving and GIC state corruption. GIC state corruption can

lead to a range of problems, including kernel panics, and unexpected

behavior.

>From the erratum text:

"In some cases, inter-socket AXI4 Stream packets with multiple

transfers, may be interleaved by the fabric when presented to ARM

Generic Interrupt Controller. GIC expects

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References