CVE-2023-54201: RDMA/efa: Fix wrong resources deallocation order
In the Linux kernel, the following vulnerability has been resolved:
RDMA/efa: Fix wrong resources deallocation order
When trying to destroy QP or CQ, we first decrease the refcount and potentially free memory regions allocated for the object and then request the device to destroy the object. If the device fails, the object isn't fully destroyed so the user/IB core can try to destroy the object again which will lead to underflow when trying to decrease an already zeroed refcount.
Deallocate resources in reverse order of allocating them to safely free them.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-54201?
CVE-2023-54201 has been classified as a medium severity vulnerability.
How do I fix CVE-2023-54201?
To address CVE-2023-54201, upgrade to the latest stable Linux kernel version where the vulnerability is patched.
What components are affected by CVE-2023-54201?
CVE-2023-54201 affects the RDMA/efa subsystem in the Linux kernel.
What are the potential consequences of CVE-2023-54201?
Exploiting CVE-2023-54201 could lead to resource leaks and system instability when deallocating resources.
Is CVE-2023-54201 specific to certain Linux kernel versions?
Yes, CVE-2023-54201 impacts specific versions of the Linux kernel that utilize the RDMA/efa subsystem.