Vulnerability in Hyper-V Fibre Channel Connectivity for Linux Kernel

CVE-2023-53245

What is CVE-2023-53245?

In the Linux kernel, a vulnerability related to the Hyper-V storvsc driver has been identified that impacts the handling of virtual Fibre Channel (vFC) timeouts. The storvsc driver, which is responsible for managing I/O to vFC devices presented in guest VMs, suffered from a flaw where the timeout function could lead to a kernel panic due to dereferencing a NULL pointer. This issue arises from partial integration with the Fibre Channel transport in the SCSI subsystem. By removing the faulty integration call, the driver can now effectively manage transient timeouts without causing system crashes, providing a more stable operational environment for users relying on this functionality.

References