CVE-2023-53463

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The ibmvnic driver in the Linux kernel contains an issue where dql stats are incorrectly reset during a NON FATAL reset. This can lead to a discrepancy between the number of queued and completed bytes, potentially causing a BUG ON crash within the dynamic queue limits functionality. Specifically, the netdev tx reset queue() function resets byte counters, and a NON FATAL reset does not flush sub crq tx buffers, leading to inaccurate statistics. The issue occurs when the number of completed bytes exceeds the number of queued bytes, triggering the crash. The vulnerable code is located in lib/dynamic queue limits.c and involves the dql completed function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.