CVE-2023-53499

When initializing XDP in virtnet_open(), some rq xdp initialization may hit an error causing net device open failed. However, previous rqs have already initialized XDP and enabled NAPI, which is not the expected behavior. Need to roll back the previous rq initialization to avoid leaks in error unwinding of init code.

Also extract helper functions of disable and enable queue pairs. Use newly introduced disable helper function in error unwinding and virtnetclose. Use enable helper function in virtnetopen.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53499.json",
    "cna_assigner": "Linux"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

754b8a21a96d5f11712245aef907149606b323ae

Fixed

6a7690f2bd178eee80f33411ae32e543ae66379c

Fixed

73f53bc295727a3cdbd9d6bcdfaa239258970cf4

Fixed

037768b28e3752c07d63d1c72a651a6775b080bb

Fixed

5306623a9826aa7d63b32c6a3803c798a765474d

Affected versions

v4.*

v4.15

v4.15-rc6

v4.15-rc7

v4.15-rc8

v4.15-rc9

v4.16

v4.16-rc1

v4.16-rc2

v4.16-rc3

v4.16-rc4

v4.16-rc5

v4.16-rc6

v4.16-rc7

v4.17

v4.17-rc1

v4.17-rc2

v4.17-rc3

v4.17-rc4

v4.17-rc5

v4.17-rc6

v4.17-rc7

v4.18

v4.18-rc1

v4.18-rc2

v4.18-rc3

v4.18-rc4

v4.18-rc5

v4.18-rc6

v4.18-rc7

v4.18-rc8

v4.19

v4.19-rc1

v4.19-rc2

v4.19-rc3

v4.19-rc4

v4.19-rc5

v4.19-rc6

v4.19-rc7

v4.19-rc8

v4.20

v4.20-rc1

v4.20-rc2

v4.20-rc3

v4.20-rc4

v4.20-rc5

v4.20-rc6

v4.20-rc7

v5.*

v5.0

v5.0-rc1

v5.0-rc2

v5.0-rc3

v5.0-rc4

v5.0-rc5

v5.0-rc6

v5.0-rc7

v5.0-rc8

v5.1

v5.1-rc1

v5.1-rc2

v5.1-rc3

v5.1-rc4

v5.1-rc5

v5.1-rc6

v5.1-rc7

v5.10

v5.10-rc1

v5.10-rc2

v5.10-rc3

v5.10-rc4

v5.10-rc5

v5.10-rc6

v5.10-rc7

v5.11

v5.11-rc1

v5.11-rc2

v5.11-rc3

v5.11-rc4

v5.11-rc5

v5.11-rc6

v5.11-rc7

v5.12

v5.12-rc1

v5.12-rc1-dontuse

v5.12-rc2

v5.12-rc3

v5.12-rc4

v5.12-rc5

v5.12-rc6

v5.12-rc7

v5.12-rc8

v5.13

v5.13-rc1

v5.13-rc2

v5.13-rc3

v5.13-rc4

v5.13-rc5

v5.13-rc6

v5.13-rc7

v5.14

v5.14-rc1

v5.14-rc2

v5.14-rc3

v5.14-rc4

v5.14-rc5

v5.14-rc6

v5.14-rc7

v5.15

v5.15-rc1

v5.15-rc2

v5.15-rc3

v5.15-rc4

v5.15-rc5

v5.15-rc6

v5.15-rc7

v5.15.1

v5.15.10

v5.15.100

v5.15.101

v5.15.102

v5.15.103

v5.15.104

v5.15.105

v5.15.106

v5.15.107

v5.15.108

v5.15.109

v5.15.11

v5.15.110

v5.15.111

v5.15.112

v5.15.12

v5.15.13

v5.15.14

v5.15.15

v5.15.16

v5.15.17

v5.15.18

v5.15.19

v5.15.2

v5.15.20

v5.15.21

v5.15.22

v5.15.23

v5.15.24

v5.15.25

v5.15.26

v5.15.27

v5.15.28

v5.15.29

v5.15.3

v5.15.30

v5.15.31

v5.15.32

v5.15.33

v5.15.34

v5.15.35

v5.15.36

v5.15.37

v5.15.38

v5.15.39

v5.15.4

v5.15.40

v5.15.41

v5.15.42

v5.15.43

v5.15.44

v5.15.45

v5.15.46

v5.15.47

v5.15.48

v5.15.49

v5.15.5

v5.15.50

v5.15.51

v5.15.52

v5.15.53

v5.15.54

v5.15.55

v5.15.56

v5.15.57

v5.15.58

v5.15.59

v5.15.6

v5.15.60

v5.15.61

v5.15.62

v5.15.63

v5.15.64

v5.15.65

v5.15.66

v5.15.67

v5.15.68

v5.15.69

v5.15.7

v5.15.70

v5.15.71

v5.15.72

v5.15.73

v5.15.74

v5.15.75

v5.15.76

v5.15.77

v5.15.78

v5.15.79

v5.15.8

v5.15.80

v5.15.81

v5.15.82

v5.15.83

v5.15.84

v5.15.85

v5.15.86

v5.15.87

v5.15.88

v5.15.89

v5.15.9

v5.15.90

v5.15.91

v5.15.92

v5.15.93

v5.15.94

v5.15.95

v5.15.96

v5.15.97

v5.15.98

v5.15.99

v5.16

v5.16-rc1

v5.16-rc2

v5.16-rc3

v5.16-rc4

v5.16-rc5

v5.16-rc6

v5.16-rc7

v5.16-rc8

v5.17

v5.17-rc1

v5.17-rc2

v5.17-rc3

v5.17-rc4

v5.17-rc5

v5.17-rc6

v5.17-rc7

v5.17-rc8

v5.18

v5.18-rc1

v5.18-rc2

v5.18-rc3

v5.18-rc4

v5.18-rc5

v5.18-rc6

v5.18-rc7

v5.19

v5.19-rc1

v5.19-rc2

v5.19-rc3

v5.19-rc4

v5.19-rc5

v5.19-rc6

v5.19-rc7

v5.19-rc8

v5.2

v5.2-rc1

v5.2-rc2

v5.2-rc3

v5.2-rc4

v5.2-rc5

v5.2-rc6

v5.2-rc7

v5.3

v5.3-rc1

v5.3-rc2

v5.3-rc3

v5.3-rc4

v5.3-rc5

v5.3-rc6

v5.3-rc7

v5.3-rc8

v5.4

v5.4-rc1

v5.4-rc2

v5.4-rc3

v5.4-rc4

v5.4-rc5

v5.4-rc6

v5.4-rc7

v5.4-rc8

v5.5

v5.5-rc1

v5.5-rc2

v5.5-rc3

v5.5-rc4

v5.5-rc5

v5.5-rc6

v5.5-rc7

v5.6

v5.6-rc1

v5.6-rc2

v5.6-rc3

v5.6-rc4

v5.6-rc5

v5.6-rc6

v5.6-rc7

v5.7

v5.7-rc1

v5.7-rc2

v5.7-rc3

v5.7-rc4

v5.7-rc5

v5.7-rc6

v5.7-rc7

v5.8

v5.8-rc1

v5.8-rc2

v5.8-rc3

v5.8-rc4

v5.8-rc5

v5.8-rc6

v5.8-rc7

v5.9

v5.9-rc1

v5.9-rc2

v5.9-rc3

v5.9-rc4

v5.9-rc5

v5.9-rc6

v5.9-rc7

v5.9-rc8

v6.*

v6.0

v6.0-rc1

v6.0-rc2

v6.0-rc3

v6.0-rc4

v6.0-rc5

v6.0-rc6

v6.0-rc7

v6.1

v6.1-rc1

v6.1-rc2

v6.1-rc3

v6.1-rc4

v6.1-rc5

v6.1-rc6

v6.1-rc7

v6.1-rc8

v6.1.1

v6.1.10

v6.1.11

v6.1.12

v6.1.13

v6.1.14

v6.1.15

v6.1.16

v6.1.17

v6.1.18

v6.1.19

v6.1.2

v6.1.20

v6.1.21

v6.1.22

v6.1.23

v6.1.24

v6.1.25

v6.1.26

v6.1.27

v6.1.28

v6.1.29

v6.1.3

v6.1.4

v6.1.5

v6.1.6

v6.1.7

v6.1.8

v6.1.9

v6.2

v6.2-rc1

v6.2-rc2

v6.2-rc3

v6.2-rc4

v6.2-rc5

v6.2-rc6

v6.2-rc7

v6.2-rc8

v6.3

v6.3-rc1

v6.3-rc2

v6.3-rc3

v6.3-rc4

v6.3-rc5

v6.3-rc6

v6.3-rc7

v6.3.1

v6.3.2

v6.3.3

v6.4-rc1

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53499.json"

vanir_signatures

[
    {
        "id": "CVE-2023-53499-0669b003",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@73f53bc295727a3cdbd9d6bcdfaa239258970cf4",
        "target": {
            "file": "drivers/net/virtio_net.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "223347359909710266697146286600716036412",
                "209006109994702652840690369132485869263",
                "111469549821981360431179580753580911331",
                "91904575627066728169328904948305226557",
                "90648125839914776992357844320242926518",
                "146471441460864667933741326690948158001",
                "316846045647488493299402008991015848527",
                "150346615515042359230156052841483847643",
                "262538174135802500147626210559430866476",
                "162358013282134737831325988709207104601",
                "283082473911499820625515844277053300260",
                "21756533083882882411789790547423716289",
                "241299190509529161313632425082584947839",
                "286150479866424970477787173185718230391",
                "55820322576769642365995052173146002468",
                "302115363730752414442058006611076506236",
                "47487969859557783754496610303522827888",
                "130429741205983784912214343917491289632",
                "286890078276632283114650695048505624202",
                "274476456792321801602771025350419890051",
                "236884948579355345925838002914807097491",
                "14434845514851006580848402618528786833",
                "317849204105892447255802021606893728017",
                "118559464107522556896748724772856436001",
                "225962782061197673848705483203196377682",
                "231307690340917566056132553894540887412",
                "135493635695773845567475876247886527367"
            ]
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "id": "CVE-2023-53499-0e13a002",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5306623a9826aa7d63b32c6a3803c798a765474d",
        "target": {
            "file": "drivers/net/virtio_net.c",
            "function": "virtnet_open"
        },
        "digest": {
            "function_hash": "312119724445472855416077721210653358286",
            "length": 747.0
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "id": "CVE-2023-53499-10d498df",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@73f53bc295727a3cdbd9d6bcdfaa239258970cf4",
        "target": {
            "file": "drivers/net/virtio_net.c",
            "function": "virtnet_open"
        },
        "digest": {
            "function_hash": "312119724445472855416077721210653358286",
            "length": 747.0
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "id": "CVE-2023-53499-2a1f7851",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@73f53bc295727a3cdbd9d6bcdfaa239258970cf4",
        "target": {
            "file": "drivers/net/virtio_net.c",
            "function": "virtnet_close"
        },
        "digest": {
            "function_hash": "232082777741523471802641306767903263263",
            "length": 340.0
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "id": "CVE-2023-53499-575e3a01",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6a7690f2bd178eee80f33411ae32e543ae66379c",
        "target": {
            "file": "drivers/net/virtio_net.c",
            "function": "virtnet_close"
        },
        "digest": {
            "function_hash": "232082777741523471802641306767903263263",
            "length": 340.0
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "id": "CVE-2023-53499-716c0b82",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@037768b28e3752c07d63d1c72a651a6775b080bb",
        "target": {
            "file": "drivers/net/virtio_net.c",
            "function": "virtnet_close"
        },
        "digest": {
            "function_hash": "232082777741523471802641306767903263263",
            "length": 340.0
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "id": "CVE-2023-53499-9bbd406e",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@037768b28e3752c07d63d1c72a651a6775b080bb",
        "target": {
            "file": "drivers/net/virtio_net.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "223347359909710266697146286600716036412",
                "209006109994702652840690369132485869263",
                "111469549821981360431179580753580911331",
                "91904575627066728169328904948305226557",
                "90648125839914776992357844320242926518",
                "146471441460864667933741326690948158001",
                "316846045647488493299402008991015848527",
                "150346615515042359230156052841483847643",
                "262538174135802500147626210559430866476",
                "162358013282134737831325988709207104601",
                "283082473911499820625515844277053300260",
                "21756533083882882411789790547423716289",
                "241299190509529161313632425082584947839",
                "286150479866424970477787173185718230391",
                "55820322576769642365995052173146002468",
                "302115363730752414442058006611076506236",
                "47487969859557783754496610303522827888",
                "130429741205983784912214343917491289632",
                "286890078276632283114650695048505624202",
                "274476456792321801602771025350419890051",
                "236884948579355345925838002914807097491",
                "14434845514851006580848402618528786833",
                "317849204105892447255802021606893728017",
                "118559464107522556896748724772856436001",
                "225962782061197673848705483203196377682",
                "231307690340917566056132553894540887412",
                "135493635695773845567475876247886527367"
            ]
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "id": "CVE-2023-53499-bea075dc",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6a7690f2bd178eee80f33411ae32e543ae66379c",
        "target": {
            "file": "drivers/net/virtio_net.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "223347359909710266697146286600716036412",
                "209006109994702652840690369132485869263",
                "111469549821981360431179580753580911331",
                "91904575627066728169328904948305226557",
                "90648125839914776992357844320242926518",
                "146471441460864667933741326690948158001",
                "316846045647488493299402008991015848527",
                "150346615515042359230156052841483847643",
                "262538174135802500147626210559430866476",
                "162358013282134737831325988709207104601",
                "283082473911499820625515844277053300260",
                "21756533083882882411789790547423716289",
                "241299190509529161313632425082584947839",
                "286150479866424970477787173185718230391",
                "55820322576769642365995052173146002468",
                "302115363730752414442058006611076506236",
                "47487969859557783754496610303522827888",
                "130429741205983784912214343917491289632",
                "286890078276632283114650695048505624202",
                "274476456792321801602771025350419890051",
                "236884948579355345925838002914807097491",
                "14434845514851006580848402618528786833",
                "317849204105892447255802021606893728017",
                "118559464107522556896748724772856436001",
                "225962782061197673848705483203196377682",
                "231307690340917566056132553894540887412",
                "135493635695773845567475876247886527367"
            ]
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "id": "CVE-2023-53499-c4482c38",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@037768b28e3752c07d63d1c72a651a6775b080bb",
        "target": {
            "file": "drivers/net/virtio_net.c",
            "function": "virtnet_open"
        },
        "digest": {
            "function_hash": "312119724445472855416077721210653358286",
            "length": 747.0
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "id": "CVE-2023-53499-d325e837",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6a7690f2bd178eee80f33411ae32e543ae66379c",
        "target": {
            "file": "drivers/net/virtio_net.c",
            "function": "virtnet_open"
        },
        "digest": {
            "function_hash": "312119724445472855416077721210653358286",
            "length": 747.0
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "id": "CVE-2023-53499-d9e6e033",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5306623a9826aa7d63b32c6a3803c798a765474d",
        "target": {
            "file": "drivers/net/virtio_net.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "223347359909710266697146286600716036412",
                "209006109994702652840690369132485869263",
                "111469549821981360431179580753580911331",
                "91904575627066728169328904948305226557",
                "90648125839914776992357844320242926518",
                "146471441460864667933741326690948158001",
                "316846045647488493299402008991015848527",
                "150346615515042359230156052841483847643",
                "262538174135802500147626210559430866476",
                "162358013282134737831325988709207104601",
                "283082473911499820625515844277053300260",
                "21756533083882882411789790547423716289",
                "241299190509529161313632425082584947839",
                "286150479866424970477787173185718230391",
                "55820322576769642365995052173146002468",
                "302115363730752414442058006611076506236",
                "47487969859557783754496610303522827888",
                "130429741205983784912214343917491289632",
                "286890078276632283114650695048505624202",
                "274476456792321801602771025350419890051",
                "236884948579355345925838002914807097491",
                "14434845514851006580848402618528786833",
                "317849204105892447255802021606893728017",
                "118559464107522556896748724772856436001",
                "225962782061197673848705483203196377682",
                "231307690340917566056132553894540887412",
                "135493635695773845567475876247886527367"
            ]
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "id": "CVE-2023-53499-f993cef4",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5306623a9826aa7d63b32c6a3803c798a765474d",
        "target": {
            "file": "drivers/net/virtio_net.c",
            "function": "virtnet_close"
        },
        "digest": {
            "function_hash": "232082777741523471802641306767903263263",
            "length": 340.0
        },
        "signature_version": "v1",
        "deprecated": false,
        "signature_type": "Function"
    }
]

Git / github.com/gregkh/linux