CVE-2023-53463

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

ibmvnic: Do not reset dql stats on NON_FATAL err

All ibmvnic resets, make a call to netdev_tx_reset_queue() when

re-opening the device. netdev_tx_reset_queue() resets the num_queued

and num_completed byte counters. These stats are used in Byte Queue

Limit (BQL) algorithms. The difference between these two stats tracks

the number of bytes currently sitting on the physical NIC. ibmvnic

increases the number of queued bytes though calls to

netdev_tx_sent_queue() in the drivers xmit function. When, VIOS reports

that it is done transmitting bytes, the ibmvnic device increases the

number of completed bytes through calls to netdev_tx_completed_queue().

It is important to note that the driver batches its transmit calls and

num_queued is increased every time that an skb is added to the next

batch, not necessarily when the batch is sent to VIOS for transmission.

Unlike other reset types, a NON FATAL reset will not flush the su

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References