CVE-2023-53528 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved:

RDMA/rxe: Fix unsafe drain work queue code

If create_qp does not fully succeed it is possible for qp cleanup
code to attempt to drain the send or recv work queues before the
queues have been created causing a seg fault. This patch checks
to see if the queues exist before attempting to drain them.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00017.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

No data.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://git.kernel.org/stable/c/5993b75d0bc71cd2b441d174b028fc36180f032c
https://git.kernel.org/stable/c/d366642b3099bd322375f5b71ba84ab1d586cd6d
https://git.kernel.org/stable/c/da572f6313aeead1f79e0810666bd8d8ffc794d4

History

Wed, 01 Oct 2025 12:00:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix unsafe drain work queue code If create_qp does not fully succeed it is possible for qp cleanup code to attempt to drain the send or recv work queues before the queues have been created causing a seg fault. This patch checks to see if the queues exist before attempting to drain them.
Title		RDMA/rxe: Fix unsafe drain work queue code
References		https://git.kernel.org/stable/c/5993b75d0bc71cd2b441d174b028fc36180f032c https://git.kernel.org/stable/c/d366642b3099bd322375f5b71ba84ab1d586cd6d https://git.kernel.org/stable/c/da572f6313aeead1f79e0810666bd8d8ffc794d4

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-10-01T11:46:13.504Z

Updated: 2025-10-01T11:46:13.504Z

Reserved: 2025-10-01T11:39:39.408Z

Link: CVE-2023-53528

Vulnrichment

No data.

NVD

Status : Received

Published: 2025-10-01T12:15:57.457

Modified: 2025-10-01T12:15:57.457

Link: CVE-2023-53528

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-53528", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2025-10-01T11:39:39.408Z", "datePublished": "2025-10-01T11:46:13.504Z", "dateUpdated": "2025-10-01T11:46:13.504Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2025-10-01T11:46:13.504Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/rxe: Fix unsafe drain work queue code\n\nIf create_qp does not fully succeed it is possible for qp cleanup\ncode to attempt to drain the send or recv work queues before the\nqueues have been created causing a seg fault. This patch checks\nto see if the queues exist before attempting to drain them."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/infiniband/sw/rxe/rxe_comp.c", "drivers/infiniband/sw/rxe/rxe_resp.c"], "versions": [{"version": "49dc9c1f0c7e396654a31a480328fffd902fa494", "lessThan": "da572f6313aeead1f79e0810666bd8d8ffc794d4", "status": "affected", "versionType": "git"}, {"version": "49dc9c1f0c7e396654a31a480328fffd902fa494", "lessThan": "d366642b3099bd322375f5b71ba84ab1d586cd6d", "status": "affected", "versionType": "git"}, {"version": "49dc9c1f0c7e396654a31a480328fffd902fa494", "lessThan": "5993b75d0bc71cd2b441d174b028fc36180f032c", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/infiniband/sw/rxe/rxe_comp.c", "drivers/infiniband/sw/rxe/rxe_resp.c"], "versions": [{"version": "6.4", "status": "affected"}, {"version": "0", "lessThan": "6.4", "status": "unaffected", "versionType": "semver"}, {"version": "6.4.16", "lessThanOrEqual": "6.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.5.3", "lessThanOrEqual": "6.5.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "6.4.16"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "6.5.3"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.4", "versionEndExcluding": "6.6"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/da572f6313aeead1f79e0810666bd8d8ffc794d4"}, {"url": "https://git.kernel.org/stable/c/d366642b3099bd322375f5b71ba84ab1d586cd6d"}, {"url": "https://git.kernel.org/stable/c/5993b75d0bc71cd2b441d174b028fc36180f032c"}], "title": "RDMA/rxe: Fix unsafe drain work queue code", "x_generator": {"engine": "bippy-1.2.0"}}}}