CVE-2023-52532: net: mana: Fix TX CQE error handling
In the Linux kernel, the following vulnerability has been resolved:
net: mana: Fix TX CQE error handling
For an unknown TX CQE error type (probably from a newer hardware), still free the SKB, update the queue tail, etc., otherwise the accounting will be wrong.
Also, TX errors can be triggered by injecting corrupted packets, so replace the WARNONCE to ratelimited error logging.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1 - Compensating control
In the Linux kernel net: mana TX error handling, replace WARN_ONCE with ratelimited error logging for corrupted-packet-triggered TX errors.
- Compensating control
For an unknown TX CQE error type, still free the SKB and update the queue tail and related accounting state so TX accounting remains correct.
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52532?
The severity of CVE-2023-52532 has been rated as moderate.
How do I fix CVE-2023-52532?
To fix CVE-2023-52532, upgrade to the recommended Linux kernel versions 5.10.223-1, 5.10.234-1, 6.1.123-1, 6.1.128-1, or 6.12.17-1.
Which versions of the Linux kernel are affected by CVE-2023-52532?
CVE-2023-52532 affects Linux kernel versions from 5.13 to 6.1.59 and from 6.2 to 6.5.7, as well as 6.6 release candidates.
What type of vulnerability is CVE-2023-52532?
CVE-2023-52532 is a vulnerability related to error handling in the network management feature of the Linux kernel.
Is CVE-2023-52532 present in Linux distributions?
Yes, CVE-2023-52532 is present in various Linux distributions that utilize the affected Linux kernel versions.