CVE-2023-53499

In the Linux kernel, the following vulnerability has been resolved:

virtio_net: Fix error unwinding of XDP initialization

When initializing XDP in virtnet_open(), some rq xdp initialization may hit an error causing net device open failed. However, previous rqs have already initialized XDP and enabled NAPI, which is not the expected behavior. Need to roll back the previous rq initialization to avoid leaks in error unwinding of init code.

Also extract helper functions of disable and enable queue pairs. Use newly introduced disable helper function in error unwinding and virtnet_close. Use enable helper function in virtnet_open.

This vulnerability is rated as Moderate severity rather than Important because exploitation requires local administrative privileges to manage network devices and configure XDP programs within a virtual guest. The failure occurs exclusively during an error recovery path when bringing up virtio-net interfaces with attached XDP logic, leaving partially initialized queue pairs uncleared. Consequently, an attacker cannot breach virtualization boundaries or compromise system integrity or confidentiality, restricting the potential blast radius to local resource leaks and denial of service within the affected guest instance.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.