Performance Context Migration Flaw in Hisilicon PCIe Driver for Linux Kernel

CVE-2023-53656

What is CVE-2023-53656?

A vulnerability in the Hisilicon PCIe driver for the Linux kernel can result in improper migration of performance contexts to a CPU that is in the process of teardown. This occurs because the cpuhp::teardown() callback does not reflect the CPU's state in the cpu_online_mask, leading the driver to migrate performance contexts to the CPU that is about to be taken offline. This issue can result in unexpected behavior and potential system instability. To address this flaw, using function cpumask_any_but() is recommended to identify an appropriate active CPU.

References