CVE-2023-54031

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to the vdpa (Virtual Data Path Acceleration) component. The vdpa nl policy structure, used for validating attributes during network message (nlmsg) parsing, lacked a necessary check for attribute length. This omission could lead to an out-of-bounds (OOB) read, similar to a previously identified issue. The patch introduces a missing network attribute policy for the vdpa queue index attribute to prevent this. The vdpa nl policy structure ensures a valid pointer before entering handlers within vdpa nl ops.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.