Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2023-53499

virtio_net: Fix error unwinding of XDP initialization

Description

In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix error unwinding of XDP initialization When initializing XDP in virtnet_open(), some rq xdp initialization may hit an error causing net device open failed. However, previous rqs have already initialized XDP and enabled NAPI, which is not the expected behavior. Need to roll back the previous rq initialization to avoid leaks in error unwinding of init code. Also extract helper functions of disable and enable queue pairs. Use newly introduced disable helper function in error unwinding and virtnet_close. Use enable helper function in virtnet_open.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 754b8a21a96d5f11712245aef907149606b323ae to < 6a7690f2bd178eee80f33411ae32e543ae66379caffected
  • 754b8a21a96d5f11712245aef907149606b323ae to < 73f53bc295727a3cdbd9d6bcdfaa239258970cf4affected
  • 754b8a21a96d5f11712245aef907149606b323ae to < 037768b28e3752c07d63d1c72a651a6775b080bbaffected
  • 754b8a21a96d5f11712245aef907149606b323ae to < 5306623a9826aa7d63b32c6a3803c798a765474daffected

Linux Linux

Default version status: affected

  • 4.16affected
  • 0 to < 4.16unaffected
  • 5.15.113 to ≤ 5.15.*unaffected
  • 6.1.30 to ≤ 6.1.*unaffected
  • 6.3.4 to ≤ 6.3.*unaffected
  • 6.4 to ≤ *unaffected

References