CVE-2023-52998

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

net: fec: Use page_pool_put_full_page when freeing rx buffers

The page_pool_release_page was used when freeing rx buffers, and this

function just unmaps the page (if mapped) and does not recycle the page.

So after hundreds of down/up the eth0, the system will out of memory.

For more details, please refer to the following reproduce steps and

bug logs. To solve this issue and refer to the doc of page pool, the

page_pool_put_full_page should be used to replace page_pool_release_page.

Because this API will try to recycle the page if the page refcnt equal to

1. After testing 20000 times, the issue can not be reproduced anymore

(about testing 391 times the issue will occur on i.MX8MN-EVK before).

Reproduce steps:

Create the test script and run the script. The script content is as

follows:

LOOPS=20000

i=1

while [ $i -le $LOOPS ]

do

echo "TINFO:ENET $curface up and down test $i times"

org_macaddr=$(cat /sys/class/ne

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References