In the Linux kernel, the following vulnerability has been resolved:
VMCI: check context->notifypage after call to getuserpagesfast() to avoid GPF
The call to getuserpagesfast() in vmcihostsetupnotify() can return NULL context->notifypage causing a GPF. To avoid GPF check if context->notifypage == NULL and return error if so.
general protection fault, probably for non-canonical address 0xe0009d1000000060: 0000 [#1] PREEMPT SMP KASAN NOPTI KASAN: maybe wild-memory-access in range [0x0005088000000300- 0x0005088000000307] CPU: 2 PID: 26180 Comm: repro34802241 Not tainted 6.1.0-rc4 #1 Hardware name: Red Hat KVM, BIOS 1.15.0-2.module+el8.6.0 04/01/2014 RIP: 0010:vmcictxchecksignalnotify+0x91/0xe0 Call Trace: <TASK> vmcihostunlockedioctl+0x362/0x1f40 _x64sysioctl+0x1a1/0x230 dosyscall64+0x3a/0x90 entrySYSCALL64after_hwframe+0x63/0xcd
[
{
"id": "CVE-2023-53259-9265fe82",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/misc/vmw_vmci/vmci_host.c"
},
"digest": {
"line_hashes": [
"64016605658366868495988785281391860179",
"159963580835422247480283876831277383226",
"2163321963161455191794847931358187217",
"327001852094688798391477260490244104847"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@055891397f530f9b1b22be38d7eca8b08382941f",
"deprecated": false
},
{
"id": "CVE-2023-53259-bd53ce53",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "vmci_host_setup_notify",
"file": "drivers/misc/vmw_vmci/vmci_host.c"
},
"digest": {
"length": 623.0,
"function_hash": "293987910650855541578698528548626119137"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b4239bfb260d1e6837766c41a0b241d7670f1402",
"deprecated": false
},
{
"id": "CVE-2023-53259-c5bfc447",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "vmci_host_setup_notify",
"file": "drivers/misc/vmw_vmci/vmci_host.c"
},
"digest": {
"length": 539.0,
"function_hash": "4098049477927513331492382403144478596"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@055891397f530f9b1b22be38d7eca8b08382941f",
"deprecated": false
},
{
"id": "CVE-2023-53259-ff79e9d7",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/misc/vmw_vmci/vmci_host.c"
},
"digest": {
"line_hashes": [
"64016605658366868495988785281391860179",
"159963580835422247480283876831277383226",
"2163321963161455191794847931358187217",
"327001852094688798391477260490244104847"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b4239bfb260d1e6837766c41a0b241d7670f1402",
"deprecated": false
}
]