CVE-2023-53175

MEDIUM

Linux kernel 5.17 through 6.1.53 - NULL Pointer Dereference in hv_pci_restore_msi_msg()

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: PCI: hv: Fix a crash in hv_pci_restore_msi_msg() during hibernation When a Linux VM with an assigned PCI device runs on Hyper-V, if the PCI device driver is not loaded yet (i.e. MSI-X/MSI is not enabled on the device yet), doing a VM hibernation triggers a panic in hv_pci_restore_msi_msg() -> msi_lock_descs(&pdev->dev), because pdev->dev.msi.data is still NULL. Avoid the panic by checking if MSI-X/MSI is enabled.

Scores

CVSS v3 5.5
EPSS 0.0014
EPSS Percentile 4.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published
Products (14)
linux/Kernel 5.17.0 - 6.1.53linux
linux/Kernel 6.2.0 - 6.4.16linux
linux/Kernel 6.5.0 - 6.5.3linux
Linux/Linux < 5.17
Linux/Linux 5.17
Linux/Linux 6.1.53 - 6.1.*
Linux/Linux 6.4.16 - 6.4.*
Linux/Linux 6.5.3 - 6.5.*
Linux/Linux 6.6
Linux/Linux dc2b453290c471266a2d56d7ead981e3c5cea05e - 04bbe863241a9be7d57fb4cf217ee4a72f480e70
... and 4 more
Published Sep 15, 2025
Tracked Since Feb 18, 2026