Linux Kernel Vulnerability in iavf Driver Affecting Network Functionality

CVE-2023-53850

What is CVE-2023-53850?

A vulnerability in the iavf driver of the Linux kernel can lead to improper resource management when the netdev is closed while the iavf_reset_task() is still in progress. This can result in the failure to free traffic IRQs, leading to resource leaks. Specifically, when __LINK_STATE_START is cleared, the iavf_reinit_interrupt_scheme() function will incorrectly signal that the network interface is not running, causing the system to be unable to correctly invoke the iavf_free_traffic_irqs() function. This oversight is logged as a warning, indicating a problem in removing a non-empty directory associated with IRQs, which can potentially affect system stability and network performance. The issue is mitigated by utilizing the internal adapter state, ensuring that traffic IRQs persist during expected conditions.

References