Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: ice: Block switchdev mode when ADQ is active and vice versa ADQ and switchdev are not supported simultaneously. Enabling both at the same time can result in nullptr dereference. To prevent this, check if ADQ is active when changing devlink mode to switchdev mode, and check if switchdev is active when enabling ADQ.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 5.16, < 6.1.47 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/stable/c/1c82d1b736ce85e77fd4da05eca6f1f4a52a2bc3Patch
- https://git.kernel.org/stable/c/24f0d69da35d812b3a1104918014a29627140cb1Patch
- https://git.kernel.org/stable/c/43d00e102d9ecbe2635d7e3f2e14d2e90183d6afPatch
FAQ
What is CVE-2023-53442?
CVE-2023-53442 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: ice: Block switchdev mode when ADQ is active and vice versa ADQ and switchdev are not supported simultaneously. Enabling both at t...
How severe is CVE-2023-53442?
CVE-2023-53442 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-53442?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.