Linux Kernel Vulnerability Affecting ARM64 Configuration by Vendor

CVE-2023-53319

What is CVE-2023-53319?

A vulnerability in the Linux kernel's KVM module arises due to a lack of synchronization between the finalize_pkvm() function and the kvm_arm_init() initialization calls. As a result, if kvm_arm_init() fails, the system continues executing finalize_pkvm(), leading to a series of warnings on all CPUs and potentially resulting in a kernel panic. This issue highlights the importance of implementing successful initialization checks to ensure system stability and security.

References