PT-2025-37643 · Bnxt Re+4 · Bnxt Re+4

Published 2025-09-15 · Updated 2026-04-14 · CVE-2023-53201

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the RDMA/bnxt re driver related to the handling of the mbox producer index wraparound. The driver incorrectly manages the wraparound of the mbox producer index, potentially leading to a firmware hang when the producer index overflows. Specifically, bit 31 of the producer index register is not handled correctly, causing the firmware to enter an initialization sequence and hang.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

BDU:2026-05870

CVE-2023-53201

SUSE-SU-2025:03600-1

SUSE-SU-2025:03614-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:03634-1

SUSE-SU-2025:20851-1

SUSE-SU-2025:20861-1

SUSE-SU-2025:20870-1

SUSE-SU-2025:20898-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3751-1

SUSE-SU-2025:3761-1

SUSE-SU-2025:4057-1

SUSE-SU-2025:4132-1

SUSE-SU-2025:4141-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

Bnxt Re

References · 2047

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53201.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:4057-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53201 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03614-1 · Vendor Advisory
• https://git.kernel.org/stable/c/0af91306e17ef3d18e5f100aa58aa787869118af · Patch
• https://git.kernel.org/stable/c/50d77c3739b2b15e9e1f1c9cbe50037d294800f8 · Patch
• https://git.kernel.org/stable/c/79226176cdd1b65a1e6a90e0e1a2b490f0a9df33 · Patch
• https://git.kernel.org/stable/c/7bfa0303fbc265c94cfbd17505c55b99848aa4e3 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53201 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53201 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:20861-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20870-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3751-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03634-1 · Vendor Advisory