Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: ice: Don't tx before switchdev is fully configured There is possibility that ice_eswitch_port_start_xmit might be called while some resources are still not allocated which might cause NULL pointer dereference. Fix this by checking if switchdev configuration was finished.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 5.16, < 6.1.55 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/stable/c/5760a72b3060150b587eff3e879648c7470efdddPatch
- https://git.kernel.org/stable/c/63ff5a94649837d980e3b9ef535c793ec8cb0ca7Patch
- https://git.kernel.org/stable/c/7aa529a69e92b9aff585e569d5003f7c15d8d60bPatch
FAQ
What is CVE-2023-53657?
CVE-2023-53657 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: ice: Don't tx before switchdev is fully configured There is possibility that ice_eswitch_port_start_xmit might be called while som...
How severe is CVE-2023-53657?
CVE-2023-53657 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-53657?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.