CVE-2023-53319 in Linux
요약
\~에 의해 VulDB • 2026. 05. 22.
리눅스 커널에서 다음 취약점이 해결되었습니다:
KVM: arm64: nvhe: Check for successful initialization of kvm_arm_init() in finalize_pkvm()
This patch fixes a kernel panic that occurs when KVM initialization fails but the system continues to proceed as if it succeeded. The panic happens in the HYP (Hypervisor) mode during memory allocation for TCP packet transmission.
The issue is that `finalize_pkvm()` doesn't check if `kvm_arm_init()` succeeded before proceeding. If `kvm_arm_init()` fails, the system continues with uninitialized KVM structures, leading to a crash when KVM-related operations are attempted.
The fix adds a check for the return value of `kvm_arm_init()` in `finalize_pkvm()`. If initialization fails, the function returns early with an error code instead of continuing with potentially uninitialized data structures.
This prevents the kernel panic by ensuring that KVM is properly initialized before any KVM-related operations are attempted.
If you want to get best quality of vulnerability data, you may have to visit VulDB.