PT-2023-9755 · Linux+3 · Linux Kernel+3
Dragos Tatulea
·
Published
2023-01-26
·
Updated
2024-11-25
·
CVE-2023-52745
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.1.0
Description
The vulnerability is related to the IB/IPoIB component of the Linux kernel, which can cause a crash when traffic is sent over the PKEY interface due to a mismatch in the number of queues between the parent and child interfaces. This issue is caused by the creation of child PKEY interfaces over netlink with multiple tx and rx queues, while some devices only support one tx and one rx queue. The patch fixes the number of queues to 1 for legacy IPoIB at the earliest possible point in time.
Recommendations
To resolve the issue, update the Linux kernel to a version that includes the fix for the IB/IPoIB vulnerability. Specifically, for Linux kernel versions prior to 6.1.0, update to version 6.1.0 or later.
Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Os
Suse