CVE-2023-53652

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The vdpa nl policy structure lacked a necessary length check for nlattr attributes during parsing of incoming nlmsg messages. This missing validation could lead to an out-of-bounds (OOB) read, similar to a previously identified issue. The patch introduces a missing nla policy for vdpa features attr to prevent this. The vdpa nl policy structure is used to validate the nlattr when parsing the incoming nlmsg. This ensures a valid nlattr pointer in info->attrs before entering handlers in vdpa nl ops.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.