CVE-2023-53175 Details
Description
In the Linux kernel, the following vulnerability has been resolved: PCI: hv: Fix a crash in hv_pci_restore_msi_msg() during hibernation When a Linux VM with an assigned PCI device runs on Hyper-V, if the PCI device driver is not loaded yet (i.e. MSI-X/MSI is not enabled on the device yet), doing a VM hibernation triggers a panic in hv_pci_restore_msi_msg() -> msi_lock_descs(&pdev->dev), because pdev->dev.msi.data is still NULL. Avoid the panic by checking if MSI-X/MSI is enabled.
A vulnerability in the Linux kernel's PCI handling for Hyper-V virtual machines can lead to a system crash during hibernation. This issue occurs when a VM with an assigned PCI device is running on Hyper-V, and the PCI device driver has not yet loaded, leaving the MSI-X/MSI functionality disabled. In this scenario, hibernating the VM causes a panic because the MSI data for the PCI device is not initialized. The vulnerability has been addressed by adding a check to ensure that MSI-X/MSI is enabled before attempting to restore the MSI message, preventing the crash.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched kernel are available on the Linux Kernel Archives.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/04bbe863241a9be7d57fb4cf217ee4a72f480e70 | kernel.org | Patch |
| https://git.kernel.org/stable/c/223fc5352054900f70b8b5e10cfc2f297e70c512 | kernel.org | Patch |
| https://git.kernel.org/stable/c/d0687755407b21d252b98dca6be459153a60c62a | kernel.org | Patch |
| https://git.kernel.org/stable/c/e32fc2168aa6b477290392ddbb73d95f012b050c | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.17, < 6.1.53 >= 6.2, < 6.4.16 >= 6.5, < 6.5.3 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Dec 2, 2025 | Initial Analysis | [email protected] |
| Sep 15, 2025 | New CVE Received | kernel.org |