CVE-2023-52905: octeontx2-pf: Fix resource leakage in VF driver unbind

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-08-21 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix resource leakage in VF driver unbind resources allocated like mcam entries to support the Ntuple feature and hash tables for the tc feature are not getting freed in driver unbind. This patch fixes the issue.

Affected products

Linux kernel: from 5.15 before 6.1.7; 6.2-rc1, 6.2-rc2, 6.2-rc3 — fixed in 6.1.7

How to fix

Upgrade to a fixed version: Linux kernel 6.1.7. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/53da7aec32982f5ee775b69dce06d63992ce4af3
https://git.kernel.org/stable/c/c8ca0ad10df08ea36bcac1288062d567d22604c9

Get alerted when CVE-2023-52905 or the next vulnerability affects your stack