PT-2025-40744 · Net/Mlx5E+4 · Net/Mlx5E+4
Published
2020-04-28
·
Updated
2025-12-04
·
CVE-2023-53581
CVSS v3.1
4.7
Medium
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.4.0-rc4+
Description
The Linux kernel contained a flaw in the net/mlx5e module where a race condition could occur during flow removal from the unready flows list. This happened because the check for the NOT READY flag was performed before acquiring the necessary lock. This could lead to a double-removal from the list and a subsequent crash. The issue was fixed by moving the flag check inside the section protected by the uplink priv->unready flows lock mutex.
Recommendations
Update to a newer version of the Linux kernel that contains the fix for this vulnerability.
Exploit
Fix
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Centos
Linux Kernel
Red Hat
Suse
Net/Mlx5E