CVE-2023-53706

A flaw was discovered in the device DAX (devdax) probing implementation of the Linux kernel memory management subsystem (mm/vmemmap/devdax). Under specific architecture configurations (for example POWER9 with hash MMU), the code path in vmemmap_populate_compound_pages() did not properly account for architecture‐specific vmemmap mappings, which could lead to a kernel data access of a bad area (kernel crash) when probing a devdax device.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.