CVE-2023-52532 net: mana: Fix TX CQE error handling

2024-03-0221:52:36

Linux

www.cve.org

linux kernel

vulnerability

resolved

net

mana

tx cqe

error handling

hardware

skb

queue tail

accounting

corrupted packets

error logging

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

In the Linux kernel, the following vulnerability has been resolved:

net: mana: Fix TX CQE error handling

For an unknown TX CQE error type (probably from a newer hardware),
still free the SKB, update the queue tail, etc., otherwise the
accounting will be wrong.

Also, TX errors can be triggered by injecting corrupted packets, so
replace the WARN_ONCE to ratelimited error logging.

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/ethernet/microsoft/mana/mana_en.c"
    ],
    "versions": [
      {
        "version": "ca9c54d2d6a5",
        "lessThan": "b67d7b1bfc46",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "ca9c54d2d6a5",
        "lessThan": "a910e0f63047",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "ca9c54d2d6a5",
        "lessThan": "b2b000069a4c",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/ethernet/microsoft/mana/mana_en.c"
    ],
    "versions": [
      {
        "version": "5.13",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.13",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.1.59",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.5.7",
        "lessThanOrEqual": "6.5.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]