PT-2025-54045 · Linux+3 · Linux Kernel+3

Published 2025-12-30 · Updated 2025-12-31 · CVE-2023-54216

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.0-rc6+ #1

Description The Linux kernel contains a flaw in the mlx5e module related to Traffic Control (TC) and the use of eswitch mapping in nic mode. The issue arises from using an uninitialized eswitch object mapping pool, leading to a slab-use-after-free condition. This can result in a kernel crash as demonstrated by the provided trace. The fix involves using the appropriate object mapping pool (nic or eswitch) based on whether eswitch is enabled.

Recommendations Update to a version newer than 6.3.0-rc6+ #1.

Exploit

Related Identifiers

CVE-2023-54216

RHSA-2023:6583

RHSA-2023:7077

Affected Products

Centos

Linux Kernel

Red Hat

Mlx5E

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54216.json · Exploit
• https://cve.org/CVERecord?id=CVE-2023-54216 · Security Note
• https://osv.dev/vulnerability/CVE-2023-54216 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-54216 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-54216 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54216 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-54216 · Vendor Advisory
• https://lore.kernel.org/linux-cve-announce/2025123025-CVE-2023-54216-93c5@gregkh/T · Note
• https://git.kernel.org/linus/dfa1e46d6093831b9d49f0f350227a1d13644a2f · Note
• https://git.kernel.org/stable/c/4150441c010dec36abc389828e2e4758bd8ad4b3 · Note
• https://git.kernel.org/stable/c/dfa1e46d6093831b9d49f0f350227a1d13644a2f · Note
• https://twitter.com/CVEnew/status/2006132975352549554 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://docs.bell-sw.com/security/cves/CVE-2023-54216 · Note