CVE-2023-53245
published 2025-09-15CVE-2023-53245: In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix handling of virtual Fibre Channel timeouts Hyper-V provides the ability…
PriorityP421medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.14%
3.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
Hyper-V provides the ability to connect Fibre Channel LUNs to the host
system and present them in a guest VM as a SCSI device. I/O to the vFC
device is handled by the storvsc driver. The storvsc driver includes a
partial integration with the FC transport implemented in the generic
portion of the Linux SCSI subsystem so that FC attributes can be displayed
in /sys. However, the partial integration means that some aspects of vFC
don't work properly. Unfortunately, a full and correct integration isn't
practical because of limitations in what Hyper-V provides to the guest.
In particular, in the context of Hyper-V storvsc, the FC transport timeout
function fc_eh_timed_out() causes a kernel panic because it can't find the
rport and dereferences a NULL pointer. The original patch that added the
call from storvsc_eh_timed_out() to fc_eh_timed_out() is faulty in this
regard.
In many cases a timeout is due to a transient condition, so the situation
can be improved by just continuing to wait like with other I/O requests
issued by storvsc, and avoiding the guaranteed panic. For a permanent
failure, continuing to wait may result in a hung thread instead of a panic,
which again may be better.
So fix the panic by removing the storvsc call to fc_eh_timed_out(). This
allows storvsc to keep waiting for a response. The change has been tested
by users who experienced a panic in fc_eh_timed_out() due to transient
timeouts, and it solves their problem.
In the future we may want to deprecate the vFC functionality in storvsc
since it can't be fully fixed. But it has current users for whom it is
working well enough, so it should probably stay for a while longer.
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.52-1 (bookworm) | linux 6.1.52-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 3930d7309807ba0bfa460dfa9ed68d5560347dd2 < cd87f4df9865a53807001ed12c0f0420b14ececd | cd87f4df9865a53807001ed12c0f0420b14ececd |
| linux | linux | >= 3930d7309807ba0bfa460dfa9ed68d5560347dd2 < 311db605e07f0d4fc0cc7ddb74f1e5692ea2f469 | 311db605e07f0d4fc0cc7ddb74f1e5692ea2f469 |
| linux | linux | >= 3930d7309807ba0bfa460dfa9ed68d5560347dd2 < 048ebc9a28fb918ee635dd4b2fcf4248eb6e4050 | 048ebc9a28fb918ee635dd4b2fcf4248eb6e4050 |
| linux | linux | >= 3930d7309807ba0bfa460dfa9ed68d5560347dd2 < 1678408d08f31a694d5150a56796dd04c9710b22 | 1678408d08f31a694d5150a56796dd04c9710b22 |
| linux | linux | >= 3930d7309807ba0bfa460dfa9ed68d5560347dd2 < 7a792b3d888aab2c65389f9f4f9f2f6c000b1a0d | 7a792b3d888aab2c65389f9f4f9f2f6c000b1a0d |
| linux | linux | >= 3930d7309807ba0bfa460dfa9ed68d5560347dd2 < ed70fa5629a8b992a5372d7044d1db1f8fa6de29 | ed70fa5629a8b992a5372d7044d1db1f8fa6de29 |
| linux | linux | >= 3930d7309807ba0bfa460dfa9ed68d5560347dd2 < 763c06565055ae373fe7f89c11e1447bd1ded264 | 763c06565055ae373fe7f89c11e1447bd1ded264 |
| linux | linux | >= 3930d7309807ba0bfa460dfa9ed68d5560347dd2 < 175544ad48cbf56affeef2a679c6a4d4fb1e2881 | 175544ad48cbf56affeef2a679c6a4d4fb1e2881 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.191-1 | 5.10.191-1 |
| linux | linux_kernel | >= 0 < 6.1.52-1 | 6.1.52-1 |
| linux | linux_kernel | >= 0 < 6.4.11-1 | 6.4.11-1 |
| linux | linux_kernel | >= 0 < 6.4.11-1 | 6.4.11-1 |
| linux | linux_kernel | >= 4.13 < 4.14.323 | 4.14.323 |
| linux | linux_kernel | >= 4.15 < 4.19.292 | 4.19.292 |
| linux | linux_kernel | >= 4.20 < 5.4.254 | 5.4.254 |
| linux | linux_kernel | >= 5.11 < 5.15.127 | 5.15.127 |
| linux | linux_kernel | >= 5.16 < 6.1.46 | 6.1.46 |
| linux | linux_kernel | >= 5.5 < 5.10.191 | 5.10.191 |
| linux | linux_kernel | >= 6.2 < 6.4.11 | 6.4.11 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
vendor_redhat·2025-09-15·CVSS 5.5
CVE-2023-53245 [MEDIUM] CWE-476 kernel: scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
kernel: scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
In the Linux kernel, the following vulnerability has been resolved:
scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
Hyper-V provides the ability to connect Fibre Channel LUNs to the host
system and present them in a guest VM as a SCSI device. I/O to the vFC
device is handled by the storvsc driver. The storvsc driver includes a
partial integration with the FC transport implemented in the generic
portion of the Linux SCSI subsystem so that FC attributes can be displayed
in /sys. However, the partial integration means that some aspects of vFC
don't work properly. Unfortunately, a full and correct integration isn't
practical because of limitations in what Hyper-V provides to the guest.
In particular, in the co
Debian
CVE-2023-53245: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: storv...
vendor_debian·2023·CVSS 5.5
CVE-2023-53245 [MEDIUM] CVE-2023-53245: linux - In the Linux kernel, the following vulnerability has been resolved: scsi: storv...
In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix handling of virtual Fibre Channel timeouts Hyper-V provides the ability to connect Fibre Channel LUNs to the host system and present them in a guest VM as a SCSI device. I/O to the vFC device is handled by the storvsc driver. The storvsc driver includes a partial integration with the FC transport implemented in the generic portion of the Linux SCSI subsystem so that FC attributes can be displayed in /sys. However, the partial integration means that some aspects of vFC don't work properly. Unfortunately, a full and correct integration isn't practical because of limitations in what Hyper-V provides to the guest. In particular, in the context of Hyper-V storvsc, the FC transport timeout function fc_eh_timed
GHSA
GHSA-3xmr-hc67-565w: In the Linux kernel, the following vulnerability has been resolved:
scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
Hyper-V provides t
ghsa_unreviewed·2025-09-15
CVE-2023-53245 [MEDIUM] CWE-476 GHSA-3xmr-hc67-565w: In the Linux kernel, the following vulnerability has been resolved:
scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
Hyper-V provides t
In the Linux kernel, the following vulnerability has been resolved:
scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
Hyper-V provides the ability to connect Fibre Channel LUNs to the host
system and present them in a guest VM as a SCSI device. I/O to the vFC
device is handled by the storvsc driver. The storvsc driver includes a
partial integration with the FC transport implemented in the generic
portion of the Linux SCSI subsystem so that FC attributes can be displayed
in /sys. However, the partial integration means that some aspects of vFC
don't work properly. Unfortunately, a full and correct integration isn't
practical because of limitations in what Hyper-V provides to the guest.
In particular, in the context of Hyper-V storvsc, the FC transport timeout
function fc_eh_ti
OSV
CVE-2023-53245: In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix handling of virtual Fibre Channel timeouts Hyper-V provides the
osv·2025-09-15·CVSS 5.5
CVE-2023-53245 [MEDIUM] CVE-2023-53245: In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix handling of virtual Fibre Channel timeouts Hyper-V provides the
In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix handling of virtual Fibre Channel timeouts Hyper-V provides the ability to connect Fibre Channel LUNs to the host system and present them in a guest VM as a SCSI device. I/O to the vFC device is handled by the storvsc driver. The storvsc driver includes a partial integration with the FC transport implemented in the generic portion of the Linux SCSI subsystem so that FC attributes can be displayed in /sys. However, the partial integration means that some aspects of vFC don't work properly. Unfortunately, a full and correct integration isn't practical because of limitations in what Hyper-V provides to the guest. In particular, in the context of Hyper-V storvsc, the FC transport timeout function fc_eh_timed
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/048ebc9a28fb918ee635dd4b2fcf4248eb6e4050https://git.kernel.org/stable/c/1678408d08f31a694d5150a56796dd04c9710b22https://git.kernel.org/stable/c/175544ad48cbf56affeef2a679c6a4d4fb1e2881https://git.kernel.org/stable/c/311db605e07f0d4fc0cc7ddb74f1e5692ea2f469https://git.kernel.org/stable/c/763c06565055ae373fe7f89c11e1447bd1ded264https://git.kernel.org/stable/c/7a792b3d888aab2c65389f9f4f9f2f6c000b1a0dhttps://git.kernel.org/stable/c/cd87f4df9865a53807001ed12c0f0420b14ececdhttps://git.kernel.org/stable/c/ed70fa5629a8b992a5372d7044d1db1f8fa6de29
2025-09-15
Published