CVE-2023-53190

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

vxlan: Fix memory leaks in error path

The memory allocated by vxlan_vnigroup_init() is not freed in the error

path, leading to memory leaks [1]. Fix by calling

vxlan_vnigroup_uninit() in the error path.

The leaks can be reproduced by annotating gro_cells_init() with

ALLOW_ERROR_INJECTION() and then running:

# echo "100" > /sys/kernel/debug/fail_function/probability

# echo "1" > /sys/kernel/debug/fail_function/times

# echo "gro_cells_init" > /sys/kernel/debug/fail_function/inject

# printf %#x -12 > /sys/kernel/debug/fail_function/gro_cells_init/retval

# ip link add name vxlan0 type vxlan dstport 4789 external vnifilter

RTNETLINK answers: Cannot allocate memory

[1]

unreferenced object 0xffff88810db84a00 (size 512):

comm "ip", pid 330, jiffies 4295010045 (age 66.016s)

hex dump (first 32 bytes):

f8 d5 76 0e 81 88 ff ff 01 00 00 00 00 00 00 02 ..v.............

03 00 04 00 48 00 00 00 00 00 00 01 04 0

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References