CVE-2023-53398

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> mlx5: fix possible ptp queue fifo use-after-free<br /> <br /> Fifo indexes are not checked during pop operations and it leads to<br /> potential use-after-free when poping from empty queue. Such case was<br /> possible during re-sync action. WARN_ON_ONCE covers future cases.<br /> <br /> There were out-of-order cqe spotted which lead to drain of the queue and<br /> use-after-free because of lack of fifo pointers check. Special check and<br /> counter are added to avoid resync operation if SKB could not exist in the<br /> fifo because of OOO cqe (skb_id must be between consumer and producer<br /> index).