In the Linux kernel, the following vulnerability has been resolved:
ice: Don't tx before switchdev is fully configured
There is possibility that iceeswitchportstartxmit might be called while some resources are still not allocated which might cause NULL pointer dereference. Fix this by checking if switchdev configuration was finished.
{ "vanir_signatures": [ { "id": "CVE-2023-53657-320d48f0", "signature_type": "Line", "target": { "file": "drivers/net/ethernet/intel/ice/ice_eswitch.c" }, "deprecated": false, "digest": { "line_hashes": [ "136428965251744566482748978424557072803", "248871780623951957604481885925694584170", "253053824517081224172503338389447234646" ], "threshold": 0.9 }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7aa529a69e92b9aff585e569d5003f7c15d8d60b" }, { "id": "CVE-2023-53657-58135439", "signature_type": "Function", "target": { "file": "drivers/net/ethernet/intel/ice/ice_eswitch.c", "function": "ice_eswitch_port_start_xmit" }, "deprecated": false, "digest": { "length": 469.0, "function_hash": "239482083199015054962876291812262736991" }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@63ff5a94649837d980e3b9ef535c793ec8cb0ca7" }, { "id": "CVE-2023-53657-6a091b89", "signature_type": "Line", "target": { "file": "drivers/net/ethernet/intel/ice/ice_eswitch.c" }, "deprecated": false, "digest": { "line_hashes": [ "136428965251744566482748978424557072803", "248871780623951957604481885925694584170", "253053824517081224172503338389447234646" ], "threshold": 0.9 }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@63ff5a94649837d980e3b9ef535c793ec8cb0ca7" }, { "id": "CVE-2023-53657-a29aba5b", "signature_type": "Function", "target": { "file": "drivers/net/ethernet/intel/ice/ice_eswitch.c", "function": "ice_eswitch_port_start_xmit" }, "deprecated": false, "digest": { "length": 469.0, "function_hash": "239482083199015054962876291812262736991" }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7aa529a69e92b9aff585e569d5003f7c15d8d60b" }, { "id": "CVE-2023-53657-cecc22bb", "signature_type": "Line", "target": { "file": "drivers/net/ethernet/intel/ice/ice_eswitch.c" }, "deprecated": false, "digest": { "line_hashes": [ "136428965251744566482748978424557072803", "248871780623951957604481885925694584170", "253053824517081224172503338389447234646" ], "threshold": 0.9 }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5760a72b3060150b587eff3e879648c7470efddd" }, { "id": "CVE-2023-53657-eb7a7bc9", "signature_type": "Function", "target": { "file": "drivers/net/ethernet/intel/ice/ice_eswitch.c", "function": "ice_eswitch_port_start_xmit" }, "deprecated": false, "digest": { "length": 469.0, "function_hash": "239482083199015054962876291812262736991" }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5760a72b3060150b587eff3e879648c7470efddd" } ] }