Riskcovery

CVE-2023-53499

virtio_net: Fix error unwinding of XDP initialization

State
Published
Severity
7.0 High
Published
Oct 1, 2025
Updated
Oct 15, 2026
Reserved
Oct 1, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

virtio_net: Fix error unwinding of XDP initialization

When initializing XDP in virtnet_open(), some rq xdp initialization may hit an error causing net device open failed. However, previous rqs have already initialized XDP and enabled NAPI, which is not the expected behavior. Need to roll back the previous rq initialization to avoid leaks in error unwinding of init code.

Also extract helper functions of disable and enable queue pairs. Use newly introduced disable helper function in error unwinding and virtnet_close. Use enable helper function in virtnet_open.

Scores

CVSSScoreVectorSource
3.17.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 754b8a21a96d5f11712245aef907149606b323ae to before 6a7690f2bd178eee80f33411ae32e543ae66379cAffected
  • 754b8a21a96d5f11712245aef907149606b323ae to before 73f53bc295727a3cdbd9d6bcdfaa239258970cf4Affected
  • 754b8a21a96d5f11712245aef907149606b323ae to before 037768b28e3752c07d63d1c72a651a6775b080bbAffected
  • 754b8a21a96d5f11712245aef907149606b323ae to before 5306623a9826aa7d63b32c6a3803c798a765474dAffected
LinuxLinux
  • 4.16Affected
  • before 4.16Not affected
  • 5.15.113 through 5.15.*Not affected
  • 6.1.30 through 6.1.*Not affected
  • 6.3.4 through 6.3.*Not affected
  • 6.4 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.