CVE-2023-54040

In the Linux kernel, the following vulnerability has been resolved: ice: fix wrong fallback logic for FDIR When adding a FDIR filter, if ice_vc_fdir_set_irq_ctx returns failure, the inserted fdir entry will not be removed and if ice_vc_fdir_write_fltr returns failure, the fdir context info for irq handler will not be cleared which may lead to inconsistent or memory leak issue. This patch refines failure cases to resolve this issue.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.0 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://git.kernel.org/stable/c/391d28c0e38c0e5b11a4240a2b4976cf63e87f45
https://git.kernel.org/stable/c/aad3b871efe26f36f45f8b4649653b5d3fd9c35e
https://git.kernel.org/stable/c/b4a01ace20f5c93c724abffc0a83ec84f514b98d
https://git.kernel.org/stable/c/cbfed5f114b5310f221979fc8190f55c6abc3400

Configurations

No configuration.

History

No history.

Information

Published : 2025-12-24 11:15

Updated : 2026-08-04 10:19

NVD link : CVE-2023-54040

Mitre link : CVE-2023-54040

CVE.ORG link : CVE-2023-54040

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2023-54040", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.0}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "1f7ea1cd6a3748427512ccc9582e18cd9efea966", "lessThan": "391d28c0e38c0e5b11a4240a2b4976cf63e87f45", "versionType": "git"}, {"status": "affected", "version": "1f7ea1cd6a3748427512ccc9582e18cd9efea966", "lessThan": "aad3b871efe26f36f45f8b4649653b5d3fd9c35e", "versionType": "git"}, {"status": "affected", "version": "1f7ea1cd6a3748427512ccc9582e18cd9efea966", "lessThan": "cbfed5f114b5310f221979fc8190f55c6abc3400", "versionType": "git"}, {"status": "affected", "version": "1f7ea1cd6a3748427512ccc9582e18cd9efea966", "lessThan": "b4a01ace20f5c93c724abffc0a83ec84f514b98d", "versionType": "git"}], "programFiles": ["drivers/net/ethernet/intel/ice/ice_virtchnl_fdir.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.13"}, {"status": "unaffected", "version": "0", "lessThan": "5.13", "versionType": "semver"}, {"status": "unaffected", "version": "5.15.107", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.24", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.2.11", "versionType": "semver", "lessThanOrEqual": "6.2.*"}, {"status": "unaffected", "version": "6.3", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/net/ethernet/intel/ice/ice_virtchnl_fdir.c"], "defaultStatus": "affected"}]}], "published": "2025-12-24T11:15:56.990", "references": [{"url": "https://git.kernel.org/stable/c/391d28c0e38c0e5b11a4240a2b4976cf63e87f45", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/aad3b871efe26f36f45f8b4649653b5d3fd9c35e", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/b4a01ace20f5c93c724abffc0a83ec84f514b98d", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/cbfed5f114b5310f221979fc8190f55c6abc3400", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Deferred", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: fix wrong fallback logic for FDIR\n\nWhen adding a FDIR filter, if ice_vc_fdir_set_irq_ctx returns failure,\nthe inserted fdir entry will not be removed and if ice_vc_fdir_write_fltr\nreturns failure, the fdir context info for irq handler will not be cleared\nwhich may lead to inconsistent or memory leak issue. This patch refines\nfailure cases to resolve this issue."}], "lastModified": "2026-08-04T10:19:25.990", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}