CVE-2024-53110

A flaw was found in the Linux kernel. The virtio-pci Virtual Data Path Acceleration (vp_vdpa) driver fails to properly null-terminate its device identifier array. A local user could exploit this flaw to cause the kernel to read out-of-bounds memory, resulting in a Denial of Service (DoS) via a system crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Prevent loading of the vp_vdpa kernel module on the system.

1. Add an entry to prevent the module from autoloading:

echo "install vp_vdpa /bin/true" > /etc/modprobe.d/disable-vp_vdpa.conf

2. If the module is currently loaded, unload it:

modprobe -r vp_vdpa

Caveat: Disabling this module prevents the system from configuring and utilizing Virtio PCI vDPA devices. If the module is in active use and cannot be unloaded dynamically, a system reboot will be required to apply the changes.