CVE-2023-53999

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: TC, Fix internal port memory leak

The flow rule can be splited, and the extra post_act rules are added

to post_act table. It's possible to trigger memleak when the rule

forwards packets from internal port and over tunnel, in the case that,

for example, CT 'new' state offload is allowed. As int_port object is

assigned to the flow attribute of post_act rule, and its refcnt is

incremented by mlx5e_tc_int_port_get(), but mlx5e_tc_int_port_put() is

not called, the refcnt is never decremented, then int_port is never

freed.

The kmemleak reports the following error:

unreferenced object 0xffff888128204b80 (size 64):

comm "handler20", pid 50121, jiffies 4296973009 (age 642.932s)

hex dump (first 32 bytes):

01 00 00 00 19 00 00 00 03 f0 00 00 04 00 00 00 ................

98 77 67 41 81 88 ff ff 98 77 67 41 81 88 ff ff .wgA.....wgA....

backtrace:

[<00000000e992680d>] kmalloc_trace+0x27/0x120

[<

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References