CVE-2024-53092

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

virtio_pci: Fix admin vq cleanup by using correct info pointer

vp_modern_avq_cleanup() and vp_del_vqs() clean up admin vq

resources by virtio_pci_vq_info pointer. The info pointer of admin

vq is stored in vp_dev->admin_vq.info instead of vp_dev->vqs[].

Using the info pointer from vp_dev->vqs[] for admin vq causes a

kernel NULL pointer dereference bug.

In vp_modern_avq_cleanup() and vp_del_vqs(), get the info pointer

from vp_dev->admin_vq.info for admin vq to clean up the resources.

Also make info ptr as argument of vp_del_vq() to be symmetric with

vp_setup_vq().

vp_reset calls vp_modern_avq_cleanup, and causes the Call Trace:

==================================================================

BUG: kernel NULL pointer dereference, address:0000000000000000

...

CPU: 49 UID: 0 PID: 4439 Comm: modprobe Not tainted 6.11.0-rc5 #1

RIP: 0010:vp_reset+0x57/0x90 [virtio_pci]

Call Trace:

<TASK>

...

? vp_reset+0x57/0x90 [virtio

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References