Back to CVE records
High 7.8Published Oct 1, 2025
CVE-2023-53504RDMA/bnxt_re: Properly order ib_device_unalloc() to avoid UAF
Updated under an hour ago ()
Does this affect you?
It affects Linux and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Properly order ib_device_unalloc() to avoid UAF ib_dealloc_device() should be called only after device cleanup. Fix the dealloc sequence.
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 15, 2026
Affected products
Linux Linux linux:linux (from the name) | from 6d758147c7b80a46465f72e9e6294d244ee98a21 before c95863f6d970ef968e7c1f3c481f72a4b0734654; from 6d758147c7b80a46465f72e9e6294d244ee98a21 before 5363fc488da579923edf6a2fdca3d3b651dd800b | CNA record |
linux linux_kernel linux:linux_kernel | from 6.3 before 6.4.11; 6.5; 6.5; 6.5; 6.5; 6.5 | NVD |
References
- https://git.kernel.org/stable/c/c95863f6d970ef968e7c1f3c481f72a4b0734654patch
- https://git.kernel.org/stable/c/5363fc488da579923edf6a2fdca3d3b651dd800bpatch
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.