CVE-2023-54168RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() The ucmd->log_sq_bb_count variable is controlled by the user so this shift can wrap. Fix it by using check_shl_overflow() in the same way that it was done in commit 515f60004ed9 ("RDMA/hns: Prevent undefined behavior in hns_roce_set_user_sq_size()").
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Deferred
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 839041329fd3410e07d614f81e75bb43367d8f89 builds before 3d5ae269c4bd392ec1edbfb3bd031b8f42d7feff; 839041329fd3410e07d614f81e75bb43367d8f89 builds before 8feca625900777e02a449e53fe4121339934c38a; 839041329fd3410e07d614f81e75bb43367d8f89 builds before 9ad3221c86cc9c6305594b742d4a72dfbd4ea579; 839041329fd3410e07d614f81e75bb43367d8f89 builds before 9911be2155720221a4f1f722b22bd0e2388d8bcf; 839041329fd3410e07d614f81e75bb43367d8f89 builds before 3ce0df3493277b9df275cb8455d9c677ae701230; 839041329fd3410e07d614f81e75bb43367d8f89 builds before 196a6df08b08699ace4ce70e1efcdd9081b6565f; from 839041329fd3410e07d614f81e75bb43367d8f89 before a183905869e692b6b7805b7472235585eff8e429; from 839041329fd3410e07d614f81e75bb43367d8f89 before d50b3c73f1ac20dabc53dc6e9d64ce9c79a331eb | CNA record |
References
- https://git.kernel.org/stable/c/3d5ae269c4bd392ec1edbfb3bd031b8f42d7feff
- https://git.kernel.org/stable/c/8feca625900777e02a449e53fe4121339934c38a
- https://git.kernel.org/stable/c/9ad3221c86cc9c6305594b742d4a72dfbd4ea579
- https://git.kernel.org/stable/c/9911be2155720221a4f1f722b22bd0e2388d8bcf
- https://git.kernel.org/stable/c/3ce0df3493277b9df275cb8455d9c677ae701230
- https://git.kernel.org/stable/c/196a6df08b08699ace4ce70e1efcdd9081b6565f
- https://git.kernel.org/stable/c/a183905869e692b6b7805b7472235585eff8e429
- https://git.kernel.org/stable/c/d50b3c73f1ac20dabc53dc6e9d64ce9c79a331eb
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.