What’s Vulnerable › Vulnerabilities

CVE-2023-53442: ice: Block switchdev mode when ADQ is active and vice versa

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-18 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: ice: Block switchdev mode when ADQ is active and vice versa ADQ and switchdev are not supported simultaneously. Enabling both at the same time can result in nullptr dereference. To prevent this, check if ADQ is active when changing devlink mode to switchdev mode, and check if switchdev is active when enabling ADQ.

Affected products

• Linux kernel: from 5.16 before 6.1.47; from 6.2 before 6.4.12; 6.5-rc1, 6.5-rc2, 6.5-rc3, 6.5-rc4, 6.5-rc5, 6.5-rc6 — fixed in 6.1.47, 6.4.12

How to fix

Upgrade to a fixed version: Linux kernel 6.1.47, 6.4.12. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1c82d1b736ce85e77fd4da05eca6f1f4a52a2bc3
• https://git.kernel.org/stable/c/24f0d69da35d812b3a1104918014a29627140cb1
• https://git.kernel.org/stable/c/43d00e102d9ecbe2635d7e3f2e14d2e90183d6af

Get alerted when CVE-2023-53442 or the next vulnerability affects your stack