
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2023-52743 is a vulnerability in the Linux kernel related to the improper use of the WQ_MEM_RECLAIM flag in the ice driver's workqueue. The issue was discovered when both ice and irdma drivers are loaded simultaneously, triggering a warning in the check_flush_dependency function. The vulnerability was disclosed on May 21, 2024, affecting Linux kernel systems using the Intel ice network driver (NVD).
The technical issue stems from the ice driver workqueue being allocated with the WQ_MEM_RECLAIM flag while the irdma driver's workqueue is not. According to kernel documentation, the WQ_MEM_RECLAIM flag should only be set if the workqueue is involved in the kernel's memory reclamation flow. Since the ice driver's workqueue is not involved in memory reclamation, the flag was incorrectly set, causing dependency check warnings (Kernel Commit).
The vulnerability results in warning messages in the kernel log when both ice and irdma drivers are loaded simultaneously. While this doesn't directly impact system security, it indicates an incorrect workqueue configuration that could potentially affect system stability and driver interactions (NVD).
There are no known exploits for this vulnerability. The issue is primarily a driver configuration problem that generates warnings rather than a security vulnerability that could be exploited maliciously (NVD).
The vulnerability has been resolved by removing the WQ_MEM_RECLAIM flag from the ice driver's workqueue initialization. The fix involves modifying the alloc_workqueue call in the ice driver to remove the unnecessary flag. This change has been implemented in the kernel source code (Kernel Commit).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."