CVE-2023-53576

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.0-rc5lblk+ #5

Description The Linux kernel contained a flaw in the null block (null blk) driver related to the handling of queue mode settings through configfs. Specifically, the code did not adequately validate the queue mode setting when read from configfs, potentially leading to an out-of-bounds (OOPs) error when the queue mode was set to 1. This could occur when using the configfs interface to configure a null block device. The issue was triggered by a specific sequence of commands involving modprobe, mkdir, echo commands to set parameters like memory backing, blocksize, size, queue mode, and power settings.

Recommendations Update to a newer kernel version that includes the fix for this vulnerability.