CVE-2023-54236

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.8-1.el7.centos.x86 64 #1

Description The Linux kernel’s net failover component contains an issue where the transmission queue (txq) size can exceed the expected limit. Specifically, the failover txq is initialized with 16 queues. When a packet is transmitted, the system selects a queue based on the primary device’s configuration. If the primary device’s txq is larger than the default of 16, a warning message is generated, indicating that the selected queue number is out of range. This occurs because the system attempts to access a queue that does not exist. The issue is triggered when the primary device is up and running. The fix reduces the txq number to align with the non-existent primary device.

Recommendations Update to Linux kernel version 6.2.8-1.el7.centos.x86 64 #1 or a later version to resolve this issue.