Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2023-53340

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
17/09/2025
Última modificación:
18/09/2025

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> net/mlx5: Collect command failures data only for known commands<br /> <br /> DEVX can issue a general command, which is not used by mlx5 driver.<br /> In case such command is failed, mlx5 is trying to collect the failure<br /> data, However, mlx5 doesn&amp;#39;t create a storage for this command, since<br /> mlx5 doesn&amp;#39;t use it. This lead to array-index-out-of-bounds error.<br /> <br /> Fix it by checking whether the command is known before collecting the<br /> failure data.

Impacto