CVE-2023-53064

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

iavf: fix hang on reboot with ice

When a system with E810 with existing VFs gets rebooted the following

hang may be observed.

Pid 1 is hung in iavf_remove(), part of a network driver:

PID: 1 TASK: ffff965400e5a340 CPU: 24 COMMAND: "systemd-shutdow"

#0 [ffffaad04005fa50] __schedule at ffffffff8b3239cb

#1 [ffffaad04005fae8] schedule at ffffffff8b323e2d

#2 [ffffaad04005fb00] schedule_hrtimeout_range_clock at ffffffff8b32cebc

#3 [ffffaad04005fb80] usleep_range_state at ffffffff8b32c930

#4 [ffffaad04005fbb0] iavf_remove at ffffffffc12b9b4c [iavf]

#5 [ffffaad04005fbf0] pci_device_remove at ffffffff8add7513

#6 [ffffaad04005fc10] device_release_driver_internal at ffffffff8af08baa

#7 [ffffaad04005fc40] pci_stop_bus_device at ffffffff8adcc5fc

#8 [ffffaad04005fc60] pci_stop_and_remove_bus_device at ffffffff8adcc81e

#9 [ffffaad04005fc70] pci_iov_remove_virtfn at ffffffff8adf9429

#10 [ffffaad0400

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References