SB20251226317 - Resource management error in Linux kernel pensando ionic driver
Published: December 26, 2025 Updated: December 31, 2025
Security Bulletin ID
SB20251226317
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Resource management error (CVE-ID: CVE-2023-53994)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to resource management error within the ionic_qcqs_free() function in drivers/net/ethernet/pensando/ionic/ionic_lif.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/1417dd787a5e55b410a00a28231b0dcb19172457
- https://git.kernel.org/stable/c/4c7276a6daf7e13a6dd30b0347b3f2c7df4d40bb
- https://git.kernel.org/stable/c/abfb2a58a5377ebab717d4362d6180f901b6e5c1
- https://git.kernel.org/stable/c/daeaad114cb163ec51bcf14326cb7fe37d368459
- https://git.kernel.org/stable/c/dc470466753ad0dd3a8c48aaefa05a992c119b9c
- https://git.kernel.org/stable/c/f8cc4fd99a325505e15c3da95d6de266efd3d9b5
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.188