PT-2024-7110 · Linux+3 · Linux Kernel+3
Published
2024-01-24
·
Updated
2024-12-12
·
CVE-2023-52487
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.0-rc6+
Description
The vulnerability is related to the net/mlx5e component in the Linux kernel. It is caused by a NULL pointer dereference when trying to remove a flow peer list head of a peer index that was never initialized. This issue can be triggered when the mlx5e tc del fdb peers flow() function calls mlx5e tc del fdb peer flow() for every possible peer index, attempting to remove the flow from eswitch instances that it has never peered with. The vulnerability can lead to a denial-of-service (DoS) condition.
To fix the issue, the Linux kernel has been updated to always remove the peer flow from the list, even when not releasing the last reference to it. This change ensures that the peer flow is properly removed, preventing the NULL pointer dereference and subsequent DoS condition.
Recommendations
To resolve this issue, update the Linux kernel to version 6.6.0-rc6 or later. If an update is not possible, consider temporarily disabling the
mlx5e tc del fdb peer flow() function until a patch is available. However, this is not a recommended long-term solution, as it may have unintended consequences on the system's functionality.Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Red Os
Ubuntu