CVE-2023-53171

kernel: Linux kernel: Denial of Service in vfio/type1 due to locked_vm underflow

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · September 15, 2025

Updated · July 22, 2026

Description

A flaw was found in the Linux kernel's vfio/type1 module. A local user could exploit this vulnerability when a vfio container is preserved across an exec() call. If the user unmaps a Direct Memory Access (DMA) mapping, the locked_vm counter can underflow. This underflow can cause subsequent DMA map requests to fail, leading to a Denial of Service (DoS) condition.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-191 · Integer Underflow (Wrap or Wraparound)