CVE-2023-53850 — Missing Reference to Active Allocated Resource in Linux
Severity
6.1MEDIUM
No vectorEPSS
0.0%
top 90.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 9
Description
In the Linux kernel, the following vulnerability has been resolved:
iavf: use internal state to free traffic IRQs
If the system tries to close the netdev while iavf_reset_task() is
running, __LINK_STATE_START will be cleared and netif_running() will
return false in iavf_reinit_interrupt_scheme(). This will result in
iavf_free_traffic_irqs() not being called and a leak as follows:
[7632.489326] remove_proc_entry: removing non-empty directory 'irq/999', leaking at least 'iavf-enp24s0f0v0-TxRx-0…
Affected Packages5 packages
▶CVEListV5linux/linux5b36e8d04b4439c9ceb814bfdfe1284737f9c632 — 6d9d01689b82ff5cb8f8d2a82717d7997bc0bfff+3
🔴Vulnerability Details
4GHSA▶
GHSA-hcp8-qjrp-6pgh: In the Linux kernel, the following vulnerability has been resolved:
iavf: use internal state to free traffic IRQs
If the system tries to close the n↗2025-12-09
OSV▶
CVE-2023-53850: In the Linux kernel, the following vulnerability has been resolved: iavf: use internal state to free traffic IRQs If the system tries to close the net↗2025-12-09