CVE-2023-54292
Data Race Vulnerability in Linux Kernel irdma RDMA Component
Publication date: 2025-12-30
Last updated on: 2025-12-30
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| intel | irdma | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a data race condition in the Linux kernel's RDMA irdma driver. Specifically, the cqp_request->request_done memory location is accessed without proper locking in two different functions, irdma_handle_cqp_op and irdma_cqp_ce_handler, leading to a race condition. The fix involves annotating these accesses with READ_ONCE/WRITE_ONCE to prevent compiler optimizations that could cause inconsistent or unsafe memory access.
How can this vulnerability impact me? :
The data race could cause unpredictable behavior in the irdma driver, potentially leading to system instability, crashes, or incorrect operation of RDMA functions. This could affect applications relying on RDMA for high-performance networking, possibly causing data corruption or service disruption.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by monitoring kernel logs for KCSAN (Kernel Concurrency Sanitizer) data race warnings related to the irdma driver, specifically messages indicating a data race on cqp_request->request_done. You can check the kernel log using commands like 'dmesg | grep KCSAN' or 'journalctl -k | grep KCSAN' to find relevant data race warnings.
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation involves updating the Linux kernel to a version where the irdma driver has been patched to fix the data race by annotating lockless accesses with READ_ONCE/WRITE_ONCE. Until an update is applied, consider disabling the irdma driver if it is not essential to your environment to avoid triggering the race condition.