CVE-2023-53175 PCI: hv: Fix a crash in hv_pci_restore_msi_msg() during hibernation
A null pointer dereference in the Linux kernel Hyper-V PCI driver causes a system crash during hibernation if MSI is not enabled.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-53175?
CVE-2023-53175 is a medium-severity vulnerability in Linux kernel, published on 15 Sep 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
PCI: hv: Fix a crash in hv_pci_restore_msi_msg() during hibernation
When a Linux VM with an assigned PCI device runs on Hyper-V, if the PCI device driver is not loaded yet (i.e. MSI-X/MSI is not enabled on the device yet), doing a VM hibernation triggers a panic in hv_pci_restore_msi_msg() -> msi_lock_descs(&pdev->dev), because pdev->dev.msi.data is still NULL.
Avoid the panic by checking if MSI-X/MSI is enabled.
Which versions are affected by CVE-2023-53175?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2023-53175?
Apply the vendor's patch.
Is CVE-2023-53175 being exploited?
There is no known exploitation of CVE-2023-53175 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2023-53175, DEBIAN-CVE-2023-53175, GHSA-73p9-x3h7-q344, UBUNTU-CVE-2023-53175.