In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: Fix unsafe drain work queue code
If create_qp does not fully succeed it is possible for qp cleanup code to attempt to drain the send or recv work queues before the queues have been created causing a seg fault. This patch checks to see if the queues exist before attempting to drain them.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53528.json"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53528.json"
[
{
"id": "CVE-2023-53528-16232a76",
"target": {
"function": "flush_recv_queue",
"file": "drivers/infiniband/sw/rxe/rxe_resp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da572f6313aeead1f79e0810666bd8d8ffc794d4",
"digest": {
"function_hash": "230690205423932014831901427883339951093",
"length": 338.0
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53528-1d216e88",
"target": {
"function": "flush_send_queue",
"file": "drivers/infiniband/sw/rxe/rxe_comp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5993b75d0bc71cd2b441d174b028fc36180f032c",
"digest": {
"function_hash": "33219520580061506450593874529700761688",
"length": 280.0
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53528-4ea257cb",
"target": {
"function": "flush_send_queue",
"file": "drivers/infiniband/sw/rxe/rxe_comp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da572f6313aeead1f79e0810666bd8d8ffc794d4",
"digest": {
"function_hash": "33219520580061506450593874529700761688",
"length": 280.0
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53528-5daf7df5",
"target": {
"function": "flush_recv_queue",
"file": "drivers/infiniband/sw/rxe/rxe_resp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5993b75d0bc71cd2b441d174b028fc36180f032c",
"digest": {
"function_hash": "199903724590796384951058802004278531860",
"length": 602.0
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53528-8c446731",
"target": {
"file": "drivers/infiniband/sw/rxe/rxe_comp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5993b75d0bc71cd2b441d174b028fc36180f032c",
"digest": {
"threshold": 0.9,
"line_hashes": [
"42380203838312418269963201449451161166",
"113230570221688147204021118258934784053",
"253461505259619459139137128947522183676"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-53528-8e4f7f9c",
"target": {
"file": "drivers/infiniband/sw/rxe/rxe_resp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da572f6313aeead1f79e0810666bd8d8ffc794d4",
"digest": {
"threshold": 0.9,
"line_hashes": [
"312210997917076776406885991590918532940",
"112112032931851802223853850692640642134",
"149756143835683597409957773509381173642"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-53528-9bb0af7d",
"target": {
"file": "drivers/infiniband/sw/rxe/rxe_comp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da572f6313aeead1f79e0810666bd8d8ffc794d4",
"digest": {
"threshold": 0.9,
"line_hashes": [
"42380203838312418269963201449451161166",
"113230570221688147204021118258934784053",
"253461505259619459139137128947522183676"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-53528-b773d461",
"target": {
"function": "flush_send_queue",
"file": "drivers/infiniband/sw/rxe/rxe_comp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d366642b3099bd322375f5b71ba84ab1d586cd6d",
"digest": {
"function_hash": "33219520580061506450593874529700761688",
"length": 280.0
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53528-c1d41225",
"target": {
"file": "drivers/infiniband/sw/rxe/rxe_resp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5993b75d0bc71cd2b441d174b028fc36180f032c",
"digest": {
"threshold": 0.9,
"line_hashes": [
"171445055244865684115549187230052946940",
"19346759306851794653054317232544634373",
"288859472051881274629846206861487400636"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-53528-c764f6c0",
"target": {
"file": "drivers/infiniband/sw/rxe/rxe_resp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d366642b3099bd322375f5b71ba84ab1d586cd6d",
"digest": {
"threshold": 0.9,
"line_hashes": [
"171445055244865684115549187230052946940",
"19346759306851794653054317232544634373",
"288859472051881274629846206861487400636"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-53528-e2c887ec",
"target": {
"function": "flush_recv_queue",
"file": "drivers/infiniband/sw/rxe/rxe_resp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d366642b3099bd322375f5b71ba84ab1d586cd6d",
"digest": {
"function_hash": "199903724590796384951058802004278531860",
"length": 602.0
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53528-e5426606",
"target": {
"file": "drivers/infiniband/sw/rxe/rxe_comp.c"
},
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d366642b3099bd322375f5b71ba84ab1d586cd6d",
"digest": {
"threshold": 0.9,
"line_hashes": [
"42380203838312418269963201449451161166",
"113230570221688147204021118258934784053",
"253461505259619459139137128947522183676"
]
},
"signature_type": "Line"
}
]