CVE-2023-54223

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.0-rc1+ #31

Description The Linux kernel contains an issue in the net/mlx5e module related to xsk (XDP socket) handling of buffers for legacy request queues (rq). A crash can occur when using xdpsock in receive (rx) mode for legacy rq, where a buffer is released twice – once in the XDP REDIRECT path and again in the driver. The fix avoids releasing the buffer on the driver side. This issue arises from a change in how fragment counts for pages are handled, replacing the skip release flag. The crash log indicates a general protection fault related to an invalid memory address.

Recommendations Update to a version newer than 6.5.0-rc1+ #31.