CVE-2023-53273

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The relid2channel() function within the vmbus driver makes an assumption about the allocation of the vmbus channel array. Specifically, it assumes the array is allocated when called. However, during scenarios like kdump/kexec, not all relids are reset by the host. If a second kernel boots and a vmbus interrupt occurs during vmbus driver initialization—before vmbus connect() completes or fails—the interrupt service routine calls relid2channel() and may cause a null pointer dereference. The issue results in a warning message and an error within relid2channel() when an invalid channel ID is encountered in the second kernel.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.