CVE-2023-53340
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
17/09/2025
Última modificación:
18/09/2025
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
net/mlx5: Collect command failures data only for known commands<br />
<br />
DEVX can issue a general command, which is not used by mlx5 driver.<br />
In case such command is failed, mlx5 is trying to collect the failure<br />
data, However, mlx5 doesn&#39;t create a storage for this command, since<br />
mlx5 doesn&#39;t use it. This lead to array-index-out-of-bounds error.<br />
<br />
Fix it by checking whether the command is known before collecting the<br />
failure data.