PT-2025-40206
CVE-2023-53499
·
Published
2023-05-12
·
Updated
2026-10-21
Description by
CVSS 3.1
7.0
HighMetricsAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An issue exists in the Linux kernel related to virtio net and the initialization of XDP. Specifically, an error during XDP initialization in
virtnet open() could lead to incomplete rollback of previous request (rq) initialization, potentially causing resource leaks. The problem arises when rq initialization errors after NAPI has been enabled. The fix involves extracting helper functions to disable and enable queue pairs, and utilizing these functions during error unwinding and in virtnet close and virtnet open.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾