CVE-2023-54166

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

igc: Fix Kernel Panic during ndo_tx_timeout callback

The Xeon validation group has been carrying out some loaded tests

with various HW configurations, and they have seen some transmit

queue time out happening during the test. This will cause the

reset adapter function to be called by igc_tx_timeout().

Similar race conditions may arise when the interface is being brought

down and up in igc_reinit_locked(), an interrupt being generated, and

igc_clean_tx_irq() being called to complete the TX.

When the igc_tx_timeout() function is invoked, this patch will turn

off all TX ring HW queues during igc_down() process. TX ring HW queues

will be activated again during the igc_configure_tx_ring() process

when performing the igc_up() procedure later.

This patch also moved existing igc_disable_tx_ring_hw() to avoid using

forward declaration.

Kernel trace:

[ 7678.747813] ------------[ cut here ]------------

[ 7678.757914] NETDEV

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References