CVE-2023-54008
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/12/2025
Last modified:
29/12/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
virtio_vdpa: build affinity masks conditionally<br />
<br />
We try to build affinity mask via create_affinity_masks()<br />
unconditionally which may lead several issues:<br />
<br />
- the affinity mask is not used for parent without affinity support<br />
(only VDUSE support the affinity now)<br />
- the logic of create_affinity_masks() might not work for devices<br />
other than block. For example it&#39;s not rare in the networking device<br />
where the number of queues could exceed the number of CPUs. Such<br />
case breaks the current affinity logic which is based on<br />
group_cpus_evenly() who assumes the number of CPUs are not less than<br />
the number of groups. This can trigger a warning[1]:<br />
<br />
if (ret >= 0)<br />
WARN_ON(nr_present + nr_others



