CVE-2023-54008

A flaw was found in the Linux kernel's virtio vDPA driver. When the number of device queues exceeds the number of CPUs, the create_affinity_masks() function triggers a kernel warning in group_cpus_evenly(). This occurs because the affinity logic assumes CPUs are not fewer than queue groups, which doesn't hold for high-queue-count network devices.

This issue triggers a kernel warning (WARN_ON), not a crash. It affects virtio vDPA devices, particularly network devices with many queues on systems with fewer CPUs. The warning is a debug assertion and does not compromise system stability or security in production kernels with panic_on_warn disabled.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.