CVE-2023-54028

In the function rxe_create_qp(), rxe_qp_from_init() is called to initialize qp, internally things like rxe_init_task are not setup until rxe_qp_init_req().

If an error occurred before this point then the unwind will call rxe_cleanup() and eventually to rxe_qp_do_cleanup()/rxe_cleanup_task() which will oops when trying to access the uninitialized spinlock.

If rxe_init_task is not executed, rxe_cleanup_task will not be called.

Database specific

{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54028.json"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

8700e3e7c4857d28ebaa824509934556da0b3e76

Fixed

3236221bb8e4de8e3d0c8385f634064fb26b8e38

Fixed

c8473cd5b301279a41dc75e5afb26b3d5223b6c7

Fixed

0d938264fcfe4927e54f0e519da05af1d5d720b4

Fixed

b2b1ddc457458fecd1c6f385baa9fbda5f0c63ad

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-54028.json"

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

4.8.0

Fixed

6.1.32

Type: ECOSYSTEM
Events: Introduced

6.2.0

Fixed

6.2.15

Type: ECOSYSTEM
Events: Introduced

6.3.0

Fixed

6.3.2

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-54028.json"