{"id":"CVE-2023-53259","title":"VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nVMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF\n\nThe call to get_user_pages_fast() in vmci_host_setup_notify() can return\nNULL context…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= a1d88436d53a75e950db15834b3d2f8c0c358fdc < b4239bfb260d1e6837766c41a0b241d7670f1402","Linux >= a1d88436d53a75e950db15834b3d2f8c0c358fdc < d4198f67e7556b1507f14f60d81a72660e5560e4","Linux >= a1d88436d53a75e950db15834b3d2f8c0c358fdc < a3c89e8c69a58f62451c0a75b77fcab25979b897","Linux >= a1d88436d53a75e950db15834b3d2f8c0c358fdc < 055891397f530f9b1b22be38d7eca8b08382941f","Linux >= a1d88436d53a75e950db15834b3d2f8c0c358fdc < 91b8e4f61f8f4594ee65368c8d89e6fdc29d3fb1","Linux >= a1d88436d53a75e950db15834b3d2f8c0c358fdc < 1a726cb47fd204109c767409fa9ca15a96328f14","Linux 4.0"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T20:20:39.550639Z"},"published":"2025-09-15","updated":"2026-11-05","sourceUpdated":"2026-11-05T20:21:07.902Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2023-53259","references":[{"url":"https://git.kernel.org/stable/c/b4239bfb260d1e6837766c41a0b241d7670f1402"},{"url":"https://git.kernel.org/stable/c/d4198f67e7556b1507f14f60d81a72660e5560e4"},{"url":"https://git.kernel.org/stable/c/a3c89e8c69a58f62451c0a75b77fcab25979b897"},{"url":"https://git.kernel.org/stable/c/055891397f530f9b1b22be38d7eca8b08382941f"},{"url":"https://git.kernel.org/stable/c/91b8e4f61f8f4594ee65368c8d89e6fdc29d3fb1"},{"url":"https://git.kernel.org/stable/c/1a726cb47fd204109c767409fa9ca15a96328f14"}],"tags":["cve.org"],"epss":0.00152,"epssPercentile":0.04426,"ingestedAt":"2026-11-05T22:38:31.788Z","slug":"CVE-2023-53259","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nVMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF\n\nThe call to get_user_pages_fast() in vmci_host_setup_notify() can return\nNULL context->notify_page causing a GPF. To avoid GPF check if\ncontext->notify_page == NULL and return error if so.\n\ngeneral protection fault, probably for non-canonical address\n    0xe0009d1000000060: 0000 [#1] PREEMPT SMP KASAN NOPTI\nKASAN: maybe wild-memory-access in range [0x0005088000000300-\n    0x0005088000000307]\nCPU: 2 PID: 26180 Comm: repro_34802241 Not tainted 6.1.0-rc4 #1\nHardware name: Red Hat KVM, BIOS 1.15.0-2.module+el8.6.0 04/01/2014\nRIP: 0010:vmci_ctx_check_signal_notify+0x91/0xe0\nCall Trace:\n <TASK>\n vmci_host_unlocked_ioctl+0x362/0x1f40\n __x64_sys_ioctl+0x1a1/0x230\n do_syscall_64+0x3a/0x90\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\n\n## Affected\n\n- `Linux >= a1d88436d53a75e950db15834b3d2f8c0c358fdc < b4239bfb260d1e6837766c41a0b241d7670f1402`\n- `Linux >= a1d88436d53a75e950db15834b3d2f8c0c358fdc < d4198f67e7556b1507f14f60d81a72660e5560e4`\n- `Linux >= a1d88436d53a75e950db15834b3d2f8c0c358fdc < a3c89e8c69a58f62451c0a75b77fcab25979b897`\n- `Linux >= a1d88436d53a75e950db15834b3d2f8c0c358fdc < 055891397f530f9b1b22be38d7eca8b08382941f`\n- `Linux >= a1d88436d53a75e950db15834b3d2f8c0c358fdc < 91b8e4f61f8f4594ee65368c8d89e6fdc29d3fb1`\n- `Linux >= a1d88436d53a75e950db15834b3d2f8c0c358fdc < 1a726cb47fd204109c767409fa9ca15a96328f14`\n- `Linux 4.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}