CVE-2023-53499

CVE-2023-53499

High · published October 1, 2025

CVSS v3.1
7.0
EPSS
0%
Percentile
4.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

virtio_net: Fix error unwinding of XDP initialization

When initializing XDP in virtnet_open(), some rq xdp initialization

may hit an error causing net device open failed. However, previous

rqs have already initialized XDP and enabled NAPI, which is not the

expected behavior. Need to roll back the previous rq initialization

to avoid leaks in error unwinding of init code.

Also extract helper functions of disable and enable queue pairs.

Use newly introduced disable helper function in error unwinding and

virtnet_close. Use enable helper function in virtnet_open.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00160 · 4.8th percentile
Published
2025-10-01T16:15Z
Affected products (5)
ProductVersionsFixed in
linux/linux_kernel≥ 4.16, < 5.15.1135.15.113
linux/linux_kernel≥ 5.16, < 6.1.306.1.30
linux/linux_kernel≥ 6.2, < 6.3.46.3.4
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (4)
EPSS history
Timeline
  • 01 OCT 11:45Z
    virtio_net: Fix error unwinding of XDP initialization
    cvelistv5