CVE-2023-1390

A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system to instantly spike to 100%, causing a denial of service condition.

Weakness

The product has a loop body or loop condition that contains a control element that directly or indirectly consumes platform resources, e.g. messaging, sessions, locks, or file descriptors.

Affected Software

Extended Description

This issue can make the product perform more slowly. If an attacker can influence the number of iterations in the loop, then this performance problem might allow a denial of service by consuming more platform resources than intended.

References

• https://gist.github.com/netspooky/bee2d07022f6350bb88eaa48e571d9b5
• https://github.com/torvalds/linux/commit/b77413446408fdd256599daf00d5be72b5f3e7c6
• https://infosec.exchange/%40_mattata/109427999461122360
• https://security.netapp.com/advisory/ntap-20230420-0001/
• https://gist.github.com/netspooky/bee2d07022f6350bb88eaa48e571d9b5
• https://github.com/torvalds/linux/commit/b77413446408fdd256599daf00d5be72b5f3e7c6
• https://infosec.exchange/%40_mattata/109427999461122360
• https://security.netapp.com/advisory/ntap-20230420-0001/