CVE-2023-54012 — Uncontrolled Recursion in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 86.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Description
In the Linux kernel, the following vulnerability has been resolved:
net: fix stack overflow when LRO is disabled for virtual interfaces
When the virtual interface's feature is updated, it synchronizes the
updated feature for its own lower interface.
This propagation logic should be worked as the iteration, not recursively.
But it works recursively due to the netdev notification unexpectedly.
This problem occurs when it disables LRO only for the team and bonding
interface type.
team0
|
+------…
Affected Packages4 packages
▶CVEListV5linux/linuxfd867d51f889aec11cca235ebb008578780d052d — 9ea0c5f90a27b5b884d880e146e0f65f3052e401+6
🔴Vulnerability Details
3GHSA▶
GHSA-2vmp-q8v6-7qc9: In the Linux kernel, the following vulnerability has been resolved:
net: fix stack overflow when LRO is disabled for virtual interfaces
When the vir↗2025-12-24
OSV▶
CVE-2023-54012: In the Linux kernel, the following vulnerability has been resolved: net: fix stack overflow when LRO is disabled for virtual interfaces When the virtu↗2025-12-24