CVE-2023-54315

Root

Cause

In the Linux kernel's powerpc/powernv platform, the Single Root I/O Virtualization (SRIOV) code in pci-sriov.c contains a null-pointer dereference. The pointer iov is dereferenced at line 597 (num_vfs = iov->num_vfs) before a null check is performed, which could lead to a crash if iov is NULL. This was detected using cppcheck static analysis [1].

Exploitation

An attacker would need to trigger a code path where iov is NULL while the vulnerable code is executed. This may require local access to the system, as the vulnerability lies in kernel code that handles SRIOV configuration. No authentication or network access is required if the attacker can already run code or influence device state.

Impact

A successful exploitation results in a denial of service (kernel panic or crash) due to a null pointer dereference. The impact is limited to system availability; there is no evidence of privilege escalation or data corruption.

Mitigation

The fix moves the null check before the dereference and is included in stable kernel updates [1][2]. Users should apply the corresponding kernel patch or update to a version containing this commit.