PT-2023-9761 · Linux+3 · Linux Kernel+3

Publicado

2023-02-06

·

Atualizado

2024-11-25

·

CVE-2023-52743

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.0-rc2 next-queue-13jan-00458-gc20aabd57164
Description The vulnerability is related to the ice driver workqueue being allocated with the WQ MEM RECLAIM flag, which is not necessary according to kernel documentation. When both ice and the irdma driver are loaded, a warning in check flush dependency is triggered. This issue can cause a warning and potentially lead to system instability.
Recommendations To resolve this issue, update the Linux kernel to a version that includes the fix for this vulnerability. Specifically, update to a version later than 6.2.0-rc2 next-queue-13jan-00458-gc20aabd57164.
As a temporary workaround, consider disabling the ice driver until a patch is available. However, this may have significant performance implications and should only be considered if the system is not critical.
It is also recommended to monitor system logs for warnings related to the ice driver and check flush dependency to identify potential issues before they cause system instability.
Note: The provided information does not specify the exact version that includes the fix, so it is recommended to update to the latest available version of the Linux kernel.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2024-10499
CVE-2023-52743
OESA-2024-1860
OPENSUSE-SU-2024_2189-1
SUSE-SU-2024:2008-1
SUSE-SU-2024:2011-1
SUSE-SU-2024:2019-1
SUSE-SU-2024:2189-1
SUSE-SU-2024:2190-1
SUSE-SU-2024:2892-1
SUSE-SU-2024:2901-1
SUSE-SU-2024:2940-1

Produtos afetados

Astra Linux
Linux Kernel
Red Os
Suse