Security tracker / CVE-2023-53647

CVE-2023-53647

Drivers: hv: vmbus: Don't dereference ACPI root object handle

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in tag below the VMBus client driver
 carnil> 7f163a6fd957 ("drivers:hv: Modify hv_vmbus to search for all MMIO ranges
 carnil> available."). Vulnerable versions: 4.3.

Bugs

Status

Branch	Status
upstream	released (6.6-rc1) [78e04bbff849b51b56f5925b1945db2c6e128b61]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.16-upstream-stable	N/A "Fixed before branching point"
6.12-upstream-stable	N/A "Fixed before branching point"
6.6-upstream-stable	N/A "Fixed before branching point"
6.1-upstream-stable	released (6.1.53) [96db43aced395844a7abc9a0a5cc702513e3534a]
5.10-upstream-stable	needed
sid	released (6.5.3-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	released (6.1.55-1)
5.10-bullseye-security	needed