github - ghsa-mcg3-6968-rr84

ghsa-mcg3-6968-rr84

Vulnerability from github

Published

2025-10-01 12:30

Modified

2025-10-01 12:30

Details

In the Linux kernel, the following vulnerability has been resolved:

RDMA/rxe: Fix unsafe drain work queue code

If create_qp does not fully succeed it is possible for qp cleanup code to attempt to drain the send or recv work queues before the queues have been created causing a seg fault. This patch checks to see if the queues exist before attempting to drain them.

Show details on source website

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2023-53528"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-10-01T12:15:57Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Fix unsafe drain work queue code\n\nIf create_qp does not fully succeed it is possible for qp cleanup\ncode to attempt to drain the send or recv work queues before the\nqueues have been created causing a seg fault. This patch checks\nto see if the queues exist before attempting to drain them.",
  "id": "GHSA-mcg3-6968-rr84",
  "modified": "2025-10-01T12:30:31Z",
  "published": "2025-10-01T12:30:31Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-53528"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/5993b75d0bc71cd2b441d174b028fc36180f032c"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/d366642b3099bd322375f5b71ba84ab1d586cd6d"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/da572f6313aeead1f79e0810666bd8d8ffc794d4"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

CVE-2023-53528 (GCVE-0-2023-53528)

Vulnerability from cvelistv5

Published

2025-10-01 11:46

Modified

2025-10-01 11:46

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix unsafe drain work queue code If create_qp does not fully succeed it is possible for qp cleanup code to attempt to drain the send or recv work queues before the queues have been created causing a seg fault. This patch checks to see if the queues exist before attempting to drain them.

References

URL

Tags

	https://git.kernel.org/stable/c/da572f6313aeead1f79e0810666bd8d8ffc794d4
	https://git.kernel.org/stable/c/d366642b3099bd322375f5b71ba84ab1d586cd6d
	https://git.kernel.org/stable/c/5993b75d0bc71cd2b441d174b028fc36180f032c

Impacted products

Vendor

Product

Version

Version: 49dc9c1f0c7e396654a31a480328fffd902fa494
Version: 49dc9c1f0c7e396654a31a480328fffd902fa494
Version: 49dc9c1f0c7e396654a31a480328fffd902fa494

Version: 6.4

Show details on NVD website

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/infiniband/sw/rxe/rxe_comp.c",
            "drivers/infiniband/sw/rxe/rxe_resp.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "da572f6313aeead1f79e0810666bd8d8ffc794d4",
              "status": "affected",
              "version": "49dc9c1f0c7e396654a31a480328fffd902fa494",
              "versionType": "git"
            },
            {
              "lessThan": "d366642b3099bd322375f5b71ba84ab1d586cd6d",
              "status": "affected",
              "version": "49dc9c1f0c7e396654a31a480328fffd902fa494",
              "versionType": "git"
            },
            {
              "lessThan": "5993b75d0bc71cd2b441d174b028fc36180f032c",
              "status": "affected",
              "version": "49dc9c1f0c7e396654a31a480328fffd902fa494",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/infiniband/sw/rxe/rxe_comp.c",
            "drivers/infiniband/sw/rxe/rxe_resp.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.4"
            },
            {
              "lessThan": "6.4",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.4.*",
              "status": "unaffected",
              "version": "6.4.16",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.5.*",
              "status": "unaffected",
              "version": "6.5.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.6",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4.16",
                  "versionStartIncluding": "6.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5.3",
                  "versionStartIncluding": "6.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6",
                  "versionStartIncluding": "6.4",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Fix unsafe drain work queue code\n\nIf create_qp does not fully succeed it is possible for qp cleanup\ncode to attempt to drain the send or recv work queues before the\nqueues have been created causing a seg fault. This patch checks\nto see if the queues exist before attempting to drain them."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-10-01T11:46:13.504Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/da572f6313aeead1f79e0810666bd8d8ffc794d4"
        },
        {
          "url": "https://git.kernel.org/stable/c/d366642b3099bd322375f5b71ba84ab1d586cd6d"
        },
        {
          "url": "https://git.kernel.org/stable/c/5993b75d0bc71cd2b441d174b028fc36180f032c"
        }
      ],
      "title": "RDMA/rxe: Fix unsafe drain work queue code",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53528",
    "datePublished": "2025-10-01T11:46:13.504Z",
    "dateReserved": "2025-10-01T11:39:39.408Z",
    "dateUpdated": "2025-10-01T11:46:13.504Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.