CVE-2023-52664

A double free vulnerability exists in the linux kernel error handling logic such that aq_ring_free could be called multiple times on the same ring,if the system is under stress and gets a memory allocation error.This vulnerability could lead to the loss of system availability.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because triggering it requires physical or virtual Aquantia network hardware and an induced out-of-memory condition during ring buffer allocation, restricting the blast radius to a local denial of service. The flaw does not provide confidentiality or integrity compromise and cannot be exploited remotely. Systems without Aquantia AQtion network adapters are not exposed to this risk.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.