CVE-2023-54008 — Numeric Range Comparison Without Minimum Check in Linux
Severity
3.3LOW
No vectorEPSS
0.0%
top 93.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Description
In the Linux kernel, the following vulnerability has been resolved:
virtio_vdpa: build affinity masks conditionally
We try to build affinity mask via create_affinity_masks()
unconditionally which may lead several issues:
- the affinity mask is not used for parent without affinity support
(only VDUSE support the affinity now)
- the logic of create_affinity_masks() might not work for devices
other than block. For example it's not rare in the networking device
where the number of queues could ex…
Affected Packages4 packages
▶CVEListV5linux/linux3dad56823b5332ffdbe1867b2d7b50fbacea124a — 5f2592243ccd5bb5341f59be409ccfdd586841f3+3
🔴Vulnerability Details
3OSV▶
CVE-2023-54008: In the Linux kernel, the following vulnerability has been resolved: virtio_vdpa: build affinity masks conditionally We try to build affinity mask via↗2025-12-24
GHSA▶
GHSA-hw63-h9pm-9g4x: In the Linux kernel, the following vulnerability has been resolved:
virtio_vdpa: build affinity masks conditionally
We try to build affinity mask vi↗2025-12-24