CVE-2023-53201
BaseFortify
Publication date: 2025-09-15
Last updated on: 2025-12-04
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | From 4.11 (inc) to 5.10.188 (exc) |
| linux | linux_kernel | From 5.11 (inc) to 5.15.121 (exc) |
| linux | linux_kernel | From 5.16 (inc) to 6.1.39 (exc) |
| linux | linux_kernel | From 6.2 (inc) to 6.3.13 (exc) |
| linux | linux_kernel | From 6.4 (inc) to 6.4.4 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-NVD-CWE-noinfo |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is in the Linux kernel's RDMA/bnxt_re driver, where the driver does not correctly handle the wraparound of the mailbox (mbox) producer index. The wraparound currently occurs when the index reaches the maximum value of a 32-bit unsigned integer (u32 max). However, bit 31 of the producer index register is special and should only be set once for the first command. Because the producer index overflows and sets bit 31 after a long time, the firmware (FW) enters an initialization sequence, causing the firmware to hang. The fix is to wrap the mbox producer index once it reaches the maximum value of a 16-bit unsigned integer (u16 max) instead.
How can this vulnerability impact me? :
This vulnerability can cause the firmware to hang due to improper handling of the mailbox producer index wraparound in the RDMA/bnxt_re driver. A firmware hang can lead to system instability, degraded performance, or loss of functionality related to RDMA operations on affected hardware.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update the Linux kernel to a version that includes the fix for the RDMA/bnxt_re driver wraparound mbox producer index issue. The fix ensures the mbox producer index wraps around at u16 max instead of u32 max, preventing firmware hangs.