CVE-2023-54031

An out-of-bounds read vulnerability was found in the Linux kernel's vDPA (virtio Data Path Acceleration) netlink interface. The vdpa_nl_policy structure was missing the nla_policy entry for the queue index attribute. Without proper validation, parsing netlink messages with this attribute could result in an invalid nlattr pointer, leading to out-of-bounds memory reads similar to CVE-2023-3773.

This flaw affects systems using vDPA for virtio device acceleration, typically in virtualization environments. The missing netlink attribute validation allows crafted netlink messages to cause OOB reads. Exploitation requires the ability to send netlink messages to the vDPA subsystem, which typically requires CAP_NET_ADMIN privileges or root access.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.