ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.1.178, 6.6.145, 6.12.97, 6.18.40, 7.1.5
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() Resetting all VFs causes resource leak on VFs with FDIR filters enabled as CTRL VSIs are only invalidated and not freed. Fix by using ice_vf_ctrl_vsi_release() instead of ice_vf_ctrl_invalidate_vsi() which aligns behavior with the ice_reset_vf() function. Reproduction: echo 1 > /sys/class/net/$pf/device/sriov_numvfs ethtool -N $vf flow-type ether proto 0x9000 action 0 echo 1 > /sys/class/net/$pf/device/reset
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
From da62c5ff9dcdac67204d6647f3cd43ad931a59f4 · fixed in b409a9dc37db8bd798122fc5bcdcfaccaf80db1e; From da62c5ff9dcdac67204d6647f3cd43ad931a59f4 · fixed in 335c2dd21ad9d520102906f96edb99fd5e89ac32; From da62c5ff9dcdac67204d6647f3cd43ad931a59f4 · fixed in 87a042e45bf4870dc75ea05b4fc0286abecb2a4d; From da62c5ff9dcdac67204d6647f3cd43ad931a59f4 · fixed in dd6d8e4412f805937f61f00bbfdfe831978be235; From da62c5ff9dcdac67204d6647f3cd43ad931a59f4 · fixed in b1fc5bafbc5f84df457b6f987ac993e0802f8d93; From da62c5ff9dcdac67204d6647f3cd43ad931a59f4 · fixed in ebbe8868cf473f698e0fbaf436d2618b2bcda806
- Linux Linux
5.13
- KernelLinux
From 5.13.0 · fixed in 6.1.178; From 6.2.0 · fixed in 6.6.145; From 6.7.0 · fixed in 6.12.97; From 6.13.0 · fixed in 6.18.40; From 6.19.0 · fixed in 7.1.5