virtio_net: Fix error unwinding of XDP initialization
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 5.15.113, 6.1.30, 6.3.4
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: total
Summary
In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix error unwinding of XDP initialization When initializing XDP in virtnet_open(), some rq xdp initialization may hit an error causing net device open failed. However, previous rqs have already initialized XDP and enabled NAPI, which is not the expected behavior. Need to roll back the previous rq initialization to avoid leaks in error unwinding of init code. Also extract helper functions of disable and enable queue pairs. Use newly introduced disable helper function in error unwinding and virtnet_close. Use enable helper function in virtnet_open.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: total
- Record last updated
Affected versions
- Linux Linux
From 754b8a21a96d5f11712245aef907149606b323ae · fixed in 6a7690f2bd178eee80f33411ae32e543ae66379c; From 754b8a21a96d5f11712245aef907149606b323ae · fixed in 73f53bc295727a3cdbd9d6bcdfaa239258970cf4; From 754b8a21a96d5f11712245aef907149606b323ae · fixed in 037768b28e3752c07d63d1c72a651a6775b080bb; From 754b8a21a96d5f11712245aef907149606b323ae · fixed in 5306623a9826aa7d63b32c6a3803c798a765474d
- Linux Linux
4.16
- KernelLinux
From 4.16.0 · fixed in 5.15.113; From 5.16.0 · fixed in 6.1.30; From 6.2.0 · fixed in 6.3.4