Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2023-53394

Gravedad CVSS v3.1:
MEDIA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
18/09/2025
Última modificación:
12/12/2025

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> net/mlx5e: xsk: Fix crash on regular rq reactivation<br /> <br /> When the regular rq is reactivated after the XSK socket is closed<br /> it could be reading stale cqes which eventually corrupts the rq.<br /> This leads to no more traffic being received on the regular rq and a<br /> crash on the next close or deactivation of the rq.<br /> <br /> Kal Cuttler Conely reported this issue as a crash on the release<br /> path when the xdpsock sample program is stopped (killed) and restarted<br /> in sequence while traffic is running.<br /> <br /> This patch flushes all cqes when during the rq flush. The cqe flushing<br /> is done in the reset state of the rq. mlx5e_rq_to_ready code is moved<br /> into the flush function to allow for this.

Productos y versiones vulnerables

CPE Desde Hasta
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.1 (incluyendo) 6.4.10 (excluyendo)
cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc4:*:*:*:*:*:*