CVE-2023-53394
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-09-18

Last updated on: 2025-12-12

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix crash on regular rq reactivation When the regular rq is reactivated after the XSK socket is closed it could be reading stale cqes which eventually corrupts the rq. This leads to no more traffic being received on the regular rq and a crash on the next close or deactivation of the rq. Kal Cuttler Conely reported this issue as a crash on the release path when the xdpsock sample program is stopped (killed) and restarted in sequence while traffic is running. This patch flushes all cqes when during the rq flush. The cqe flushing is done in the reset state of the rq. mlx5e_rq_to_ready code is moved into the flush function to allow for this.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-09-18
Last Modified
2025-12-12
Generated
2026-05-07
AI Q&A
2025-09-18
EPSS Evaluated
2026-05-05
NVD
CVE-2023-53394
Affected Vendors & Products
Showing 5 associated CPEs
Vendor Product Version / Range
linux linux_kernel From 6.1 (inc) to 6.4.10 (exc)
linux linux_kernel 6.5
linux linux_kernel 6.5
linux linux_kernel 6.5
linux linux_kernel 6.5
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-NVD-CWE-noinfo
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability occurs in the Linux kernel's mlx5e network driver related to XSK sockets. When the regular receive queue (rq) is reactivated after an XSK socket is closed, it may read stale completion queue entries (cqes), which corrupts the rq. This corruption causes the regular rq to stop receiving traffic and leads to a crash when the rq is next closed or deactivated. The issue happens specifically when stopping and restarting the xdpsock sample program while traffic is running. The fix involves flushing all cqes during the rq flush to prevent stale data from causing corruption.


How can this vulnerability impact me? :

This vulnerability can cause the network receive queue to become corrupted, resulting in no more traffic being received on that queue. Additionally, it can cause the system to crash when the receive queue is closed or deactivated. This can lead to network disruptions and potential downtime on affected systems using the mlx5e driver with XSK sockets.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart