Critical Vulnerability in Linux Kernel: ADQ and Switchdev Mode Conflict
Summary
CVE-2023-53442: In the Linux kernel, the following vulnerability has been resolved: ice: Block switchdev mode when ADQ is active and vice versa ADQ and switchdev are not supported simultaneously. Affects linux versions < 6.1.52-1. Fixed in 6.1.52-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, responsible for managing hardware and system resources. It provides essential services for all other parts of the operating system. The kernel is highly modular and supports various functionalities, including networking, file systems, and process management. This vulnerability specifically affects the kernel's ability to handle Adaptive Device Queues (ADQ) and switchdev mode simultaneously, which can lead to system instability.
Vulnerability Detail
In the Linux kernel, a critical vulnerability has been identified where enabling both Adaptive Device Queues (ADQ) and switchdev mode at the same time can lead to a null pointer dereference. This issue arises because ADQ and switchdev are not designed to operate concurrently. If both features are activated, it can cause the system to crash or behave unpredictably, potentially leading to denial of service or data loss.
How To Fix
Minimum fixed version
6.1.52-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid enabling both ADQ and switchdev mode simultaneously. Ensure that only one of these features is active at any given time to prevent system instability.
Conclusion
The vulnerability in the Linux kernel regarding the conflict between ADQ and switchdev mode poses significant risks to system stability. It is crucial to apply the necessary updates to mitigate these risks effectively. Users are encouraged to monitor their systems for vulnerabilities using tools like Vulert.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to system crashes or unpredictable behavior when both ADQ and switchdev mode are enabled.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Check your application against the vulnerability using the Vulert playground.
ADQ is a feature that optimizes network performance by managing device queues, while switchdev mode allows the kernel to manage network switches more effectively.
Yes, updating to the patched versions of the Linux kernel will permanently fix the vulnerability.
If an immediate update is not possible, ensure that ADQ and switchdev mode are not enabled at the same time as a temporary measure.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
