In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: Fix unsafe drain work queue code
If create_qp does not fully succeed it is possible for qp cleanup code to attempt to drain the send or recv work queues before the queues have been created causing a seg fault. This patch checks to see if the queues exist before attempting to drain them.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53528.json"
}[
{
"id": "CVE-2023-53528-16232a76",
"digest": {
"length": 338.0,
"function_hash": "230690205423932014831901427883339951093"
},
"target": {
"file": "drivers/infiniband/sw/rxe/rxe_resp.c",
"function": "flush_recv_queue"
},
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da572f6313aeead1f79e0810666bd8d8ffc794d4"
},
{
"id": "CVE-2023-53528-1d216e88",
"digest": {
"length": 280.0,
"function_hash": "33219520580061506450593874529700761688"
},
"target": {
"file": "drivers/infiniband/sw/rxe/rxe_comp.c",
"function": "flush_send_queue"
},
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5993b75d0bc71cd2b441d174b028fc36180f032c"
},
{
"id": "CVE-2023-53528-4ea257cb",
"digest": {
"length": 280.0,
"function_hash": "33219520580061506450593874529700761688"
},
"target": {
"file": "drivers/infiniband/sw/rxe/rxe_comp.c",
"function": "flush_send_queue"
},
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da572f6313aeead1f79e0810666bd8d8ffc794d4"
},
{
"id": "CVE-2023-53528-5daf7df5",
"digest": {
"length": 602.0,
"function_hash": "199903724590796384951058802004278531860"
},
"target": {
"file": "drivers/infiniband/sw/rxe/rxe_resp.c",
"function": "flush_recv_queue"
},
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5993b75d0bc71cd2b441d174b028fc36180f032c"
},
{
"id": "CVE-2023-53528-8c446731",
"digest": {
"line_hashes": [
"42380203838312418269963201449451161166",
"113230570221688147204021118258934784053",
"253461505259619459139137128947522183676"
],
"threshold": 0.9
},
"target": {
"file": "drivers/infiniband/sw/rxe/rxe_comp.c"
},
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5993b75d0bc71cd2b441d174b028fc36180f032c"
},
{
"id": "CVE-2023-53528-8e4f7f9c",
"digest": {
"line_hashes": [
"312210997917076776406885991590918532940",
"112112032931851802223853850692640642134",
"149756143835683597409957773509381173642"
],
"threshold": 0.9
},
"target": {
"file": "drivers/infiniband/sw/rxe/rxe_resp.c"
},
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da572f6313aeead1f79e0810666bd8d8ffc794d4"
},
{
"id": "CVE-2023-53528-9bb0af7d",
"digest": {
"line_hashes": [
"42380203838312418269963201449451161166",
"113230570221688147204021118258934784053",
"253461505259619459139137128947522183676"
],
"threshold": 0.9
},
"target": {
"file": "drivers/infiniband/sw/rxe/rxe_comp.c"
},
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@da572f6313aeead1f79e0810666bd8d8ffc794d4"
},
{
"id": "CVE-2023-53528-b773d461",
"digest": {
"length": 280.0,
"function_hash": "33219520580061506450593874529700761688"
},
"target": {
"file": "drivers/infiniband/sw/rxe/rxe_comp.c",
"function": "flush_send_queue"
},
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d366642b3099bd322375f5b71ba84ab1d586cd6d"
},
{
"id": "CVE-2023-53528-c1d41225",
"digest": {
"line_hashes": [
"171445055244865684115549187230052946940",
"19346759306851794653054317232544634373",
"288859472051881274629846206861487400636"
],
"threshold": 0.9
},
"target": {
"file": "drivers/infiniband/sw/rxe/rxe_resp.c"
},
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5993b75d0bc71cd2b441d174b028fc36180f032c"
},
{
"id": "CVE-2023-53528-c764f6c0",
"digest": {
"line_hashes": [
"171445055244865684115549187230052946940",
"19346759306851794653054317232544634373",
"288859472051881274629846206861487400636"
],
"threshold": 0.9
},
"target": {
"file": "drivers/infiniband/sw/rxe/rxe_resp.c"
},
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d366642b3099bd322375f5b71ba84ab1d586cd6d"
},
{
"id": "CVE-2023-53528-e2c887ec",
"digest": {
"length": 602.0,
"function_hash": "199903724590796384951058802004278531860"
},
"target": {
"file": "drivers/infiniband/sw/rxe/rxe_resp.c",
"function": "flush_recv_queue"
},
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d366642b3099bd322375f5b71ba84ab1d586cd6d"
},
{
"id": "CVE-2023-53528-e5426606",
"digest": {
"line_hashes": [
"42380203838312418269963201449451161166",
"113230570221688147204021118258934784053",
"253461505259619459139137128947522183676"
],
"threshold": 0.9
},
"target": {
"file": "drivers/infiniband/sw/rxe/rxe_comp.c"
},
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d366642b3099bd322375f5b71ba84ab1d586cd6d"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53528.json"