Executive brief
The Intel ice network driver in the Linux kernel contains a defect in its Flow Director (FDIR) filtering logic that fails to properly clean up resources when filter configuration fails. This can leave orphaned filter entries and internal state inconsistencies in the network device, potentially leading to memory leaks and degraded network performance over time.
Technical details
The vulnerability exists in the ice_vc_add_fdir_fltr() function in ice_virtchnl_fdir.c. When ice_vc_fdir_set_irq_ctx() fails, the code incorrectly jumps to err_free_conf without cleaning up the already-inserted FDIR entry. Similarly, when ice_vc_fdir_write_fltr() fails, it jumps to err_rem_entry without first clearing the IRQ context state. This incorrect error handling flow causes resource leaks and inconsistent internal state. The fix reorders the error handling labels to ensure proper cleanup sequence: first clearing IRQ context, then removing the filter entry, and finally freeing configuration memory. No authentication or user interaction is required—the vulnerability exists in kernel driver code paths that can be triggered during normal FDIR filter operations.
Affected products
- Linux Linux kernel Multiple kernel versions (details in commit log: affects stable branches including 4.14.y through 6.7.y)
Timeline
- 2023-03-22: disclosed
- 2023-04-13: patched