CVE-2023-54291

A NULL pointer dereference vulnerability was found in the Linux kernel's VDUSE (vDPA Device in Userspace) subsystem. The vduse_vdpa_set_vq_affinity() callback can be invoked with a NULL cpu_mask value when deleting a vduse device. The code attempts to copy from this NULL pointer, causing a kernel crash during device removal.

This flaw affects systems using VDUSE for userspace-backed vDPA devices, typically in virtualization environments. The crash occurs during device deletion operations, which generally require administrative privileges. While the bug causes a denial of service, exploitation is limited to users with permissions to manage vDPA devices.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the vduse module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.