BaseFortify

Publication date: 2025-10-01

Last updated on: 2026-04-06

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix unsafe drain work queue code If create_qp does not fully succeed it is possible for qp cleanup code to attempt to drain the send or recv work queues before the queues have been created causing a seg fault. This patch checks to see if the queues exist before attempting to drain them.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-01

Last Modified

2026-04-06

Generated

2026-07-06

AI Q&A

2025-10-01

EPSS Evaluated

2026-07-05

NVD

CVE-2023-53528

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 5.15.160 (inc) to 5.16 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability occurs in the Linux kernel's RDMA/rxe component where, if the creation of a queue pair (create_qp) does not fully succeed, the cleanup code may try to drain the send or receive work queues before they have been created. This can cause a segmentation fault (crash). The fix involves adding a check to ensure the queues exist before attempting to drain them.

Impact Analysis

The vulnerability can cause a segmentation fault in the Linux kernel, potentially leading to system instability or crashes when the RDMA/rxe component's queue pairs fail to be created properly and the cleanup code runs. This could disrupt services relying on RDMA functionality.

Hi! I’m here to help you understand CVE-2023-53528. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70