CVE-2023-53245

一、漏洞信息
 漏洞编号：[CVE-2023-53245](https://nvd.nist.gov/vuln/detail/CVE-2023-53245)
 漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)
 漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.19,6.4.0,6.6.0
 CVSS V3.0分值：
  BaseScore：N/A None
  Vector：CVSS：3.0/
 漏洞简述：
  In the Linux kernel, the following vulnerability has been resolved:scsi: storvsc: Fix handling of virtual Fibre Channel timeoutsHyper-V provides the ability to connect Fibre Channel LUNs to the hostsystem and present them in a guest VM as a SCSI device. I/O to the vFCdevice is handled by the storvsc driver. The storvsc driver includes apartial integration with the FC transport implemented in the genericportion of the Linux SCSI subsystem so that FC attributes can be displayedin /sys.  However, the partial integration means that some aspects of vFCdon t work properly. Unfortunately, a full and correct integration isn tpractical because of limitations in what Hyper-V provides to the guest.In particular, in the context of Hyper-V storvsc, the FC transport timeoutfunction fc_eh_timed_out() causes a kernel panic because it can t find therport and dereferences a NULL pointer. The original patch that added thecall from storvsc_eh_timed_out() to fc_eh_timed_out() is faulty in thisregard.In many cases a timeout is due to a transient condition, so the situationcan be improved by just continuing to wait like with other I/O requestsissued by storvsc, and avoiding the guaranteed panic. For a permanentfailure, continuing to wait may result in a hung thread instead of a panic,which again may be better.So fix the panic by removing the storvsc call to fc_eh_timed_out().  Thisallows storvsc to keep waiting for a response.  The change has been testedby users who experienced a panic in fc_eh_timed_out() due to transienttimeouts, and it solves their problem.In the future we may want to deprecate the vFC functionality in storvscsince it can t be fully fixed. But it has current users for whom it isworking well enough, so it should probably stay for a while longer.
 漏洞公开时间：2025-09-15 23:15:51
 漏洞创建时间：2025-09-15 23:57:55
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2023-53245
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
|  | https://git.kernel.org/stable/c/cd87f4df9865a53807001ed12c0f0420b14ececd |  |
|  | https://git.kernel.org/stable/c/311db605e07f0d4fc0cc7ddb74f1e5692ea2f469 |  |
|  | https://git.kernel.org/stable/c/048ebc9a28fb918ee635dd4b2fcf4248eb6e4050 |  |
|  | https://git.kernel.org/stable/c/1678408d08f31a694d5150a56796dd04c9710b22 |  |
|  | https://git.kernel.org/stable/c/7a792b3d888aab2c65389f9f4f9f2f6c000b1a0d |  |
|  | https://git.kernel.org/stable/c/ed70fa5629a8b992a5372d7044d1db1f8fa6de29 |  |
|  | https://git.kernel.org/stable/c/763c06565055ae373fe7f89c11e1447bd1ded264 |  |
|  | https://git.kernel.org/stable/c/175544ad48cbf56affeef2a679c6a4d4fb1e2881 |  |
|  | https://lore.kernel.org/linux-cve-announce/2025091501-CVE-2023-53245-256b@gregkh/T/#u |  |
|  | https://security-tracker.debian.org/tracker/CVE-2023-53245 |  |
|  | https://www.cve.org/CVERecord?id=CVE-2023-53245 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2023-53245 |  |
|  | https://lore.kernel.org/linux-cve-announce/2025091501-CVE-2023-53245-256b@gregkh/T |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=2395372 |  |
|  | https://docs.bell-sw.com/security/cves/CVE-2023-53245 |  |
|  | http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-53245 |  |
|  | https://git.kernel.org/stable/c/048ebc9a28fb918ee635dd4b2fcf4248eb6e4050 |  |
|  | https://git.kernel.org/stable/c/1678408d08f31a694d5150a56796dd04c9710b22 |  |
|  | https://git.kernel.org/stable/c/175544ad48cbf56affeef2a679c6a4d4fb1e2881 |  |
|  | https://git.kernel.org/stable/c/311db605e07f0d4fc0cc7ddb74f1e5692ea2f469 |  |
|  | https://git.kernel.org/stable/c/763c06565055ae373fe7f89c11e1447bd1ded264 |  |
|  | https://git.kernel.org/stable/c/7a792b3d888aab2c65389f9f4f9f2f6c000b1a0d |  |
|  | https://git.kernel.org/stable/c/cd87f4df9865a53807001ed12c0f0420b14ececd |  |
|  | https://git.kernel.org/stable/c/ed70fa5629a8b992a5372d7044d1db1f8fa6de29 |  |
|  | http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-53245 |  |
|  | https://git.kernel.org/stable/c/048ebc9a28fb918ee635dd4b2fcf4248eb6e4050 |  |
|  | https://git.kernel.org/stable/c/1678408d08f31a694d5150a56796dd04c9710b22 |  |
|  | https://git.kernel.org/stable/c/175544ad48cbf56affeef2a679c6a4d4fb1e2881 |  |
|  | https://git.kernel.org/stable/c/311db605e07f0d4fc0cc7ddb74f1e5692ea2f469 |  |
|  | https://git.kernel.org/stable/c/763c06565055ae373fe7f89c11e1447bd1ded264 |  |
|  | https://git.kernel.org/stable/c/7a792b3d888aab2c65389f9f4f9f2f6c000b1a0d |  |
|  | https://git.kernel.org/stable/c/cd87f4df9865a53807001ed12c0f0420b14ececd |  |
|  | https://git.kernel.org/stable/c/ed70fa5629a8b992a5372d7044d1db1f8fa6de29 |  |
|  | http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-53245 |  |
|  | https://git.kernel.org/stable/c/048ebc9a28fb918ee635dd4b2fcf4248eb6e4050 |  |
|  | https://git.kernel.org/stable/c/1678408d08f31a694d5150a56796dd04c9710b22 |  |
|  | https://git.kernel.org/stable/c/175544ad48cbf56affeef2a679c6a4d4fb1e2881 |  |
|  | https://git.kernel.org/stable/c/311db605e07f0d4fc0cc7ddb74f1e5692ea2f469 |  |
|  | https://git.kernel.org/stable/c/763c06565055ae373fe7f89c11e1447bd1ded264 |  |
|  | https://git.kernel.org/stable/c/7a792b3d888aab2c65389f9f4f9f2f6c000b1a0d |  |
|  | https://git.kernel.org/stable/c/cd87f4df9865a53807001ed12c0f0420b14ececd |  |
|  | https://git.kernel.org/stable/c/ed70fa5629a8b992a5372d7044d1db1f8fa6de29 |  |
|  | http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-53245 |  |
|  | https://git.kernel.org/stable/c/048ebc9a28fb918ee635dd4b2fcf4248eb6e4050 |  |
|  | https://git.kernel.org/stable/c/1678408d08f31a694d5150a56796dd04c9710b22 |  |
|  | https://git.kernel.org/stable/c/175544ad48cbf56affeef2a679c6a4d4fb1e2881 |  |
|  | https://git.kernel.org/stable/c/311db605e07f0d4fc0cc7ddb74f1e5692ea2f469 |  |
|  | https://git.kernel.org/stable/c/763c06565055ae373fe7f89c11e1447bd1ded264 |  |
|  | https://git.kernel.org/stable/c/7a792b3d888aab2c65389f9f4f9f2f6c000b1a0d |  |
|  | https://git.kernel.org/stable/c/cd87f4df9865a53807001ed12c0f0420b14ececd |  |
|  | https://git.kernel.org/stable/c/ed70fa5629a8b992a5372d7044d1db1f8fa6de29 |  |
|  | http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-53245 |  |
|  | https://git.kernel.org/stable/c/048ebc9a28fb918ee635dd4b2fcf4248eb6e4050 |  |
|  | https://git.kernel.org/stable/c/1678408d08f31a694d5150a56796dd04c9710b22 |  |
|  | https://git.kernel.org/stable/c/175544ad48cbf56affeef2a679c6a4d4fb1e2881 |  |
|  | https://git.kernel.org/stable/c/311db605e07f0d4fc0cc7ddb74f1e5692ea2f469 |  |
|  | https://git.kernel.org/stable/c/763c06565055ae373fe7f89c11e1447bd1ded264 |  |
|  | https://git.kernel.org/stable/c/7a792b3d888aab2c65389f9f4f9f2f6c000b1a0d |  |
|  | https://git.kernel.org/stable/c/cd87f4df9865a53807001ed12c0f0420b14ececd |  |
|  | https://git.kernel.org/stable/c/ed70fa5629a8b992a5372d7044d1db1f8fa6de29 |  |
|  | http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-53245 |  |
|  | https://git.kernel.org/stable/c/048ebc9a28fb918ee635dd4b2fcf4248eb6e4050 |  |
|  | https://git.kernel.org/stable/c/1678408d08f31a694d5150a56796dd04c9710b22 |  |
|  | https://git.kernel.org/stable/c/175544ad48cbf56affeef2a679c6a4d4fb1e2881 |  |
|  | https://git.kernel.org/stable/c/311db605e07f0d4fc0cc7ddb74f1e5692ea2f469 |  |
|  | https://git.kernel.org/stable/c/763c06565055ae373fe7f89c11e1447bd1ded264 |  |
|  | https://git.kernel.org/stable/c/7a792b3d888aab2c65389f9f4f9f2f6c000b1a0d |  |
|  | https://git.kernel.org/stable/c/cd87f4df9865a53807001ed12c0f0420b14ececd |  |
|  | https://git.kernel.org/stable/c/ed70fa5629a8b992a5372d7044d1db1f8fa6de29 |  |
|  | http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-53245 |  |
|  | https://git.kernel.org/stable/c/048ebc9a28fb918ee635dd4b2fcf4248eb6e4050 |  |
|  | https://git.kernel.org/stable/c/1678408d08f31a694d5150a56796dd04c9710b22 |  |
|  | https://git.kernel.org/stable/c/175544ad48cbf56affeef2a679c6a4d4fb1e2881 |  |
|  | https://git.kernel.org/stable/c/311db605e07f0d4fc0cc7ddb74f1e5692ea2f469 |  |
|  | https://git.kernel.org/stable/c/763c06565055ae373fe7f89c11e1447bd1ded264 |  |
|  | https://git.kernel.org/stable/c/7a792b3d888aab2c65389f9f4f9f2f6c000b1a0d |  |
|  | https://git.kernel.org/stable/c/cd87f4df9865a53807001ed12c0f0420b14ececd |  |
|  | https://git.kernel.org/stable/c/ed70fa5629a8b992a5372d7044d1db1f8fa6de29 |  |
|  | http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-53245 |  |
|  | https://git.kernel.org/stable/c/048ebc9a28fb918ee635dd4b2fcf4248eb6e4050 |  |
|  | https://git.kernel.org/stable/c/1678408d08f31a694d5150a56796dd04c9710b22 |  |
|  | https://git.kernel.org/stable/c/175544ad48cbf56affeef2a679c6a4d4fb1e2881 |  |
|  | https://git.kernel.org/stable/c/311db605e07f0d4fc0cc7ddb74f1e5692ea2f469 |  |
|  | https://git.kernel.org/stable/c/763c06565055ae373fe7f89c11e1447bd1ded264 |  |
|  | https://git.kernel.org/stable/c/7a792b3d888aab2c65389f9f4f9f2f6c000b1a0d |  |
|  | https://git.kernel.org/stable/c/cd87f4df9865a53807001ed12c0f0420b14ececd |  |
|  | https://git.kernel.org/stable/c/ed70fa5629a8b992a5372d7044d1db1f8fa6de29 |  |
|  | http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-53245 |  |
|  | https://git.kernel.org/stable/c/048ebc9a28fb918ee635dd4b2fcf4248eb6e4050 |  |
|  | https://git.kernel.org/stable/c/1678408d08f31a694d5150a56796dd04c9710b22 |  |
|  | https://git.kernel.org/stable/c/175544ad48cbf56affeef2a679c6a4d4fb1e2881 |  |
|  | https://git.kernel.org/stable/c/311db605e07f0d4fc0cc7ddb74f1e5692ea2f469 |  |
|  | https://git.kernel.org/stable/c/763c06565055ae373fe7f89c11e1447bd1ded264 |  |
|  | https://git.kernel.org/stable/c/7a792b3d888aab2c65389f9f4f9f2f6c000b1a0d |  |
|  | https://git.kernel.org/stable/c/cd87f4df9865a53807001ed12c0f0420b14ececd |  |
|  | https://git.kernel.org/stable/c/ed70fa5629a8b992a5372d7044d1db1f8fa6de29 |  |
|  | http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-53245 |  |
|  | https://git.kernel.org/stable/c/048ebc9a28fb918ee635dd4b2fcf4248eb6e4050 |  |
|  | https://git.kernel.org/stable/c/1678408d08f31a694d5150a56796dd04c9710b22 |  |
|  | https://git.kernel.org/stable/c/175544ad48cbf56affeef2a679c6a4d4fb1e2881 |  |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  七彩瞬析开源风险感知平台
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源  |
| ------- | -------- | ------- | -------- | --------- |
| gregkh/linux |  | https://git.kernel.org/stable/c/311db605e07f0d4fc0cc7ddb74f1e5692ea2f469.patch |  | ljqc |
| gregkh/linux |  | https://git.kernel.org/stable/c/048ebc9a28fb918ee635dd4b2fcf4248eb6e4050 |  | ljqc |
| gregkh/linux |  | https://git.kernel.org/stable/c/1678408d08f31a694d5150a56796dd04c9710b22 |  | ljqc |
| gregkh/linux |  | https://git.kernel.org/stable/c/7a792b3d888aab2c65389f9f4f9f2f6c000b1a0d |  | ljqc |
| gregkh/linux |  | https://git.kernel.org/stable/c/763c06565055ae373fe7f89c11e1447bd1ded264 |  | ljqc |
| gregkh/linux |  | https://git.kernel.org/stable/c/175544ad48cbf56affeef2a679c6a4d4fb1e2881 |  | ljqc |
|  |  | https://git.kernel.org/stable/c/cd87f4df9865a53807001ed12c0f0420b14ececd |  | cvelistv5 |
|  |  | https://git.kernel.org/stable/c/311db605e07f0d4fc0cc7ddb74f1e5692ea2f469 |  | cvelistv5 |
|  |  | https://git.kernel.org/stable/c/048ebc9a28fb918ee635dd4b2fcf4248eb6e4050 |  | cvelistv5 |
|  |  | https://git.kernel.org/stable/c/1678408d08f31a694d5150a56796dd04c9710b22 |  | cvelistv5 |
|  |  | https://git.kernel.org/stable/c/7a792b3d888aab2c65389f9f4f9f2f6c000b1a0d |  | cvelistv5 |
|  |  | https://git.kernel.org/stable/c/ed70fa5629a8b992a5372d7044d1db1f8fa6de29 |  | cvelistv5 |
|  |  | https://git.kernel.org/stable/c/763c06565055ae373fe7f89c11e1447bd1ded264 |  | cvelistv5 |
|  |  | https://git.kernel.org/stable/c/175544ad48cbf56affeef2a679c6a4d4fb1e2881 |  | cvelistv5 |
|  |  | https://git.kernel.org/stable/c/048ebc9a28fb918ee635dd4b2fcf4248eb6e4050 |  | snyk |
|  |  | https://git.kernel.org/stable/c/1678408d08f31a694d5150a56796dd04c9710b22 |  | snyk |
|  |  | https://git.kernel.org/stable/c/175544ad48cbf56affeef2a679c6a4d4fb1e2881 |  | snyk |
|  |  | https://git.kernel.org/stable/c/311db605e07f0d4fc0cc7ddb74f1e5692ea2f469 |  | snyk |
|  |  | https://git.kernel.org/stable/c/763c06565055ae373fe7f89c11e1447bd1ded264 |  | snyk |
|  |  | https://git.kernel.org/stable/c/7a792b3d888aab2c65389f9f4f9f2f6c000b1a0d |  | snyk |
|  |  | https://git.kernel.org/stable/c/cd87f4df9865a53807001ed12c0f0420b14ececd |  | snyk |
|  |  | https://git.kernel.org/stable/c/ed70fa5629a8b992a5372d7044d1db1f8fa6de29 |  | snyk |

</details>

二、漏洞分析结构反馈
 影响性分析说明：
  In the Linux kernel, the following vulnerability has been resolved:scsi: storvsc: Fix handling of virtual Fibre Channel timeoutsHyper-V provides the ability to connect Fibre Channel LUNs to the hostsystem and present them in a guest VM as a SCSI device. I/O to the vFCdevice is handled by the storvsc driver. The storvsc driver includes apartial integration with the FC transport implemented in the genericportion of the Linux SCSI subsystem so that FC attributes can be displayedin /sys.  However, the partial integration means that some aspects of vFCdon t work properly. Unfortunately, a full and correct integration isn tpractical because of limitations in what Hyper-V provides to the guest.In particular, in the context of Hyper-V storvsc, the FC transport timeoutfunction fc_eh_timed_out() causes a kernel panic because it can t find therport and dereferences a NULL pointer. The original patch that added thecall from storvsc_eh_timed_out() to fc_eh_timed_out() is faulty in thisregard.In many cases a timeout is due to a transient condition, so the situationcan be improved by just continuing to wait like with other I/O requestsissued by storvsc, and avoiding the guaranteed panic. For a permanentfailure, continuing to wait may result in a hung thread instead of a panic,which again may be better.So fix the panic by removing the storvsc call to fc_eh_timed_out().  Thisallows storvsc to keep waiting for a response.  The change has been testedby users who experienced a panic in fc_eh_timed_out() due to transienttimeouts, and it solves their problem.In the future we may want to deprecate the vFC functionality in storvscsince it can t be fully fixed. But it has current users for whom it isworking well enough, so it should probably stay for a while longer.The Linux kernel CVE team has assigned CVE-2023-53245 to this issue.
 openEuler评分：
  5.5
 Vector：CVSS：3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
 受影响版本排查(受影响/不受影响)：
  1.openEuler-22.03-LTS-SP3(5.10.0):受影响
2.openEuler-22.03-LTS-SP4(5.10.0):受影响
3.master(6.12.33):不受影响
4.openEuler-20.03-LTS-SP4(4.19.90):不受影响
5.openEuler-24.03-LTS(6.6.0):不受影响
6.openEuler-24.03-LTS-Next(6.6.0):不受影响
7.openEuler-24.03-LTS-SP1(6.6.0):不受影响
8.openEuler-24.03-LTS-SP2(6.6.0):不受影响

修复是否涉及abi变化(是/否)：
  1.master(6.12.33):否
2.openEuler-20.03-LTS-SP4(4.19.90):否
3.openEuler-22.03-LTS-SP3(5.10.0):否
4.openEuler-22.03-LTS-SP4(5.10.0):否
5.openEuler-24.03-LTS(6.6.0):否
6.openEuler-24.03-LTS-Next(6.6.0):否
7.openEuler-24.03-LTS-SP1(6.6.0):否
8.openEuler-24.03-LTS-SP2(6.6.0):否

原因说明：
  1.openEuler-22.03-LTS-SP3(5.10.0):不修复-超出修复范围
2.openEuler-22.03-LTS-SP4(5.10.0):不修复-超出修复范围
3.master(6.12.33):不受影响-漏洞代码不能被攻击者触发
4.openEuler-20.03-LTS-SP4(4.19.90):不受影响-漏洞代码不能被攻击者触发
5.openEuler-24.03-LTS(6.6.0):不受影响-漏洞代码不能被攻击者触发
6.openEuler-24.03-LTS-Next(6.6.0):不受影响-漏洞代码不能被攻击者触发
7.openEuler-24.03-LTS-SP1(6.6.0):不受影响-漏洞代码不能被攻击者触发
8.openEuler-24.03-LTS-SP2(6.6.0):不受影响-漏洞代码不能被攻击者触发

src-openEuler/kernel
Closed

Content Risk Flag

Comments (7)

src-openEuler/kernelClosed .gitee-modal { width: 500px !important; }

Content Risk Flag

CVE-2023-53245

Comments (7)

Search

src-openEuler/kernel
Closed