PT-2023-9761 · Linux+3 · Linux Kernel+3

Published

2023-02-06

·

Updated

2024-11-25

·

CVE-2023-52743

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.0-rc2 next-queue-13jan-00458-gc20aabd57164
Description The vulnerability is related to the ice driver workqueue being allocated with the WQ MEM RECLAIM flag, which is not necessary according to kernel documentation. When both ice and the irdma driver are loaded, a warning in check flush dependency is triggered. This issue can cause a warning and potentially lead to system instability.
Recommendations To resolve this issue, update the Linux kernel to a version that includes the fix for this vulnerability. Specifically, update to a version later than 6.2.0-rc2 next-queue-13jan-00458-gc20aabd57164.
As a temporary workaround, consider disabling the ice driver until a patch is available. However, this may have significant performance implications and should only be considered if the system is not critical.
It is also recommended to monitor system logs for warnings related to the ice driver and check flush dependency to identify potential issues before they cause system instability.
Note: The provided information does not specify the exact version that includes the fix, so it is recommended to update to the latest available version of the Linux kernel.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2024-10499
CVE-2023-52743
OESA-2024-1860
OPENSUSE-SU-2024_2189-1
SUSE-SU-2024:2008-1
SUSE-SU-2024:2011-1
SUSE-SU-2024:2019-1
SUSE-SU-2024:2189-1
SUSE-SU-2024:2190-1
SUSE-SU-2024:2892-1
SUSE-SU-2024:2901-1
SUSE-SU-2024:2940-1

Affected Products

Astra Linux
Linux Kernel
Red Os
Suse