Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2023-53398

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
18/09/2025
Última modificación:
19/09/2025

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> mlx5: fix possible ptp queue fifo use-after-free<br /> <br /> Fifo indexes are not checked during pop operations and it leads to<br /> potential use-after-free when poping from empty queue. Such case was<br /> possible during re-sync action. WARN_ON_ONCE covers future cases.<br /> <br /> There were out-of-order cqe spotted which lead to drain of the queue and<br /> use-after-free because of lack of fifo pointers check. Special check and<br /> counter are added to avoid resync operation if SKB could not exist in the<br /> fifo because of OOO cqe (skb_id must be between consumer and producer<br /> index).

Impacto