CVE-2023-53995
Description
In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix one memleak in __inet_del_ifa() I got the below warning when do fuzzing test: unregister_netdevice: waiting for bond0 to become free. Usage count = 2 It can be repoduced via: ip link add bond0 type bond sysctl -w net.ipv4.conf.bond0.promote_secondaries=1 ip addr add 4.117.174.103/0 scope 0x40 dev bond0 ip addr add 192.168.100.111/255.255.255.254 scope 0 dev bond0 ip addr add 0.0.0.4/0 scope 0x40 secondary dev bond0 ip addr del 4.117.174.103/0 scope 0x40 dev bond0 ip link delete bond0 type bond In this reproduction test case, an incorrect 'last_prim' is found in __inet_del_ifa(), as a result, the secondary address(0.0.0.4/0 scope 0x40) is lost. The memory of the secondary address is leaked and the reference of in_device and net_device is leaked. Fix this problem: Look for 'last_prim' starting at location of the deleted IP and inserting the promoted IP into the location of 'last_prim'.
How to fix
- Linux Linux5624f26a3574500ce23929cb2c9976a0dec9920a, 7c8ddcdab1b900bed69cad6beef477fff116289e, 2f1e86014d0cc084886c36a2d77bc620e2d42618, 980f8445479814509a3cd55a8eabaae1c9030a4c, 42652af5360d30b43b06057c193739e7dfb18f42, ac28b1ec6135649b5d78b028e47264cb3ebca5ea or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 0ff60a45678e67b2547256a636fd00c1667ce4fa ≤ v < 5624f26a3574500ce23929cb2c9976a0dec9920a, 0ff60a45678e67b2547256a636fd00c1667ce4fa ≤ v < 7c8ddcdab1b900bed69cad6beef477fff116289e, 0ff60a45678e67b2547256a636fd00c1667ce4fa ≤ v < 2f1e86014d0cc084886c36a2d77bc620e2d42618, 0ff60a45678e67b2547256a636fd00c1667ce4fa ≤ v < 980f8445479814509a3cd55a8eabaae1c9030a4c, 0ff60a45678e67b2547256a636fd00c1667ce4fa ≤ v < 42652af5360d30b43b06057c193739e7dfb18f42, 0ff60a45678e67b2547256a636fd00c1667ce4fa ≤ v < ac28b1ec6135649b5d78b028e47264cb3ebca5ea, 2.6.15 | 5624f26a3574500ce23929cb2c9976a0dec9920a, 7c8ddcdab1b900bed69cad6beef477fff116289e, 2f1e86014d0cc084886c36a2d77bc620e2d42618, 980f8445479814509a3cd55a8eabaae1c9030a4c, 42652af5360d30b43b06057c193739e7dfb18f42, ac28b1ec6135649b5d78b028e47264cb3ebca5ea |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.