CVE-2023-54031
In the Linux kernel, the following vulnerability has been resolved: vdpa: Add queue index attr to vdpa_nl_policy for nlattr length check The vdpa_nl_policy structure is used to validate the nlattr when parsing the incoming nlmsg. It will ensure the attribute being described produces a valid nlattr pointer in info->attrs before entering into each handler in vdpa_nl_ops. That is to say, the missing part in vdpa_nl_policy may lead to illegal nlattr after parsing, which could lead to OOB read just like CVE-2023-3773. This patch adds the missing nla_policy for vdpa queue index attr to avoid such bugs.
Affected versions
Linux kernel versions
5.19
and later are affected. Fixed in
6.1.47,
6.4.12,
6.5
and their respective stable series.
References
The following references provide additional information about CVE-2023-54031 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.
-
PatchKernel patch commithttps://git.kernel.org/stable/c/8ad9bc25cbdcec72e7ca43dd8281decb69ea9a70
-
PatchKernel patch commithttps://git.kernel.org/stable/c/b3003e1b54e057f5f3124e437b80c3bef26ed3fe
-
PatchKernel patch commithttps://git.kernel.org/stable/c/ccb533b7070aeeb65c66ea5d590e9c62421dcd61
Frequently asked questions
-
What is CVE-2023-54031?
CVE-2023-54031 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 5.19 onward and has been patched in 6.1.47, 6.4.12 and 6.5. CVE-2023-54031 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2023-54031?
Yes — CVE-2023-54031 has been patched. Fixed versions include 6.1.47, 6.4.12 and 6.5. If you are running Linux kernel 5.19 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2023-54031 actively exploited?
No — CVE-2023-54031 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.