CVE-2023-54090

A flaw was found in the Linux kernel's ixgbe network driver. On systems with more than 64 CPUs, XDP_TX operations can cause a kernel panic due to an array-index-out-of-bounds access. The ixgbe_xdp_locking_key variable can be incorrectly decremented to zero during ring reconfiguration, causing the driver to use raw CPU numbers instead of CPU % 64 for XDP ring indexing, leading to NULL pointer dereference.

This flaw affects high-core-count systems (more than 64 CPUs) using Intel ixgbe network adapters with XDP programs. The panic can be triggered when loading XDP programs or when using ethtool --set-channels to reconfigure the interface. Servers with many cores using ixgbe NICs for XDP packet processing are at risk.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, avoid using XDP programs on ixgbe interfaces on systems with more than 64 CPUs, or prevent the ixgbe module from being loaded if not needed. See https://access.redhat.com/solutions/41278 for instructions on blocking modules.