CVE-2023-52811: scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool
In the Linux kernel, the following vulnerability has been resolved:
scsi: ibmvfc: Remove BUGON in the case of an empty event pool
In practice the driver should never send more commands than are allocated to a queue's event pool. In the unlikely event that this happens, the code asserts a BUGON, and in the case that the kernel is not configured to crash on panic returns a junk event pointer from the empty event list causing things to spiral from there. This BUGON is a historical artifact of the ibmvfc driver first being upstreamed, and it is well known now that the use of BUGON is bad practice except in the most unrecoverable scenario. There is nothing about this scenario that prevents the driver from recovering and carrying on.
Remove the BUGON in question from ibmvfcgetevent() and return a NULL pointer in the case of an empty event pool. Update all call sites to ibmvfcgetevent() to check for a NULL pointer and perfrom the appropriate failure or recovery action.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
scsi: ibmvfc: Remove BUGON in the case of an empty event pool
The Linux kernel CVE team has assigned CVE-2023-52811 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024052102-CVE-2023-52811-2a5f@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52811?
CVE-2023-52811 is classified as a potential issue in the Linux kernel that could lead to unexpected behavior under specific conditions.
How do I fix CVE-2023-52811?
To mitigate CVE-2023-52811, ensure your Linux kernel package is updated to versions 5.15.140, 6.1.64, 6.5.13, 6.6.3, or 6.7.
What versions of the Linux kernel are affected by CVE-2023-52811?
CVE-2023-52811 affects Linux kernel versions below 5.15.140, 6.1.64, 6.5.13, 6.6.3, and 6.7.
Can CVE-2023-52811 lead to system crashes?
While CVE-2023-52811 may not directly cause system crashes, it could lead to instability if the event pool exceeds its allocation.
Is there a specific command to check the kernel version at risk for CVE-2023-52811?
You can check the kernel version at risk for CVE-2023-52811 by running the command 'uname -r' in your terminal.