CVE-2023-54070

A flaw was found in the Linux kernel's igb driver. When the igb module is loaded with Single Root I/O Virtualization (SR-IOV) enabled on certain network adapters, and the SR-IOV initialization subsequently fails, the driver does not properly clean up allocated resources. A local user can exploit this improper cleanup by attempting to remove the igb module, which may cause the system to hang or crash, leading to a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the igb kernel module from loading with SR-IOV enabled. If the igb driver is not in use, blacklist the module by creating a file /etc/modprobe.d/blacklist-igb.conf with the content blacklist igb. Regenerate the initramfs and reboot the system for the changes to take effect. If the igb driver is required but SR-IOV functionality is not, ensure the max_vfs parameter is set to 0 by creating /etc/modprobe.d/igb.conf with options igb max_vfs=0. A system reboot is required for these changes to apply.