CVE - CVE-2023-53110

CVE-ID
CVE-2023-53110	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler() When performing a stress test on SMC-R by rmmod mlx5_ib driver during the wrk/nginx test, we found that there is a probability of triggering a panic while terminating all link groups. This issue dues to the race between smc_smcr_terminate_all() and smc_buf_create(). smc_smcr_terminate_all smc_buf_create /* init / conn->sndbuf_desc = NULL; ... __smc_lgr_terminate smc_conn_kill smc_close_abort smc_cdc_get_slot_and_msg_send __softirqentry_text_start smc_wr_tx_process_cqe smc_cdc_tx_handler READ(conn->sndbuf_desc->len); / panic dues to NULL sndbuf_desc */ conn->sndbuf_desc = xxx; This patch tries to fix the issue by always to check the sndbuf_desc before send any cdc msg, to make sure that no null pointer is seen during cqe processing.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/22a825c541d775c1dbe7b2402786025acad6727b URL:https://git.kernel.org/stable/c/22a825c541d775c1dbe7b2402786025acad6727b MISC:https://git.kernel.org/stable/c/31817c530768b0199771ec6019571b4f0ddbf230 URL:https://git.kernel.org/stable/c/31817c530768b0199771ec6019571b4f0ddbf230 MISC:https://git.kernel.org/stable/c/3c270435db8aa34929263dddae8fd050f5216ecb URL:https://git.kernel.org/stable/c/3c270435db8aa34929263dddae8fd050f5216ecb MISC:https://git.kernel.org/stable/c/3ebac7cf0a184a8102821a7a00203f02bebda83c URL:https://git.kernel.org/stable/c/3ebac7cf0a184a8102821a7a00203f02bebda83c MISC:https://git.kernel.org/stable/c/b108bd9e6be000492ebebe867daa699285978a10 URL:https://git.kernel.org/stable/c/b108bd9e6be000492ebebe867daa699285978a10
Assigning CNA
kernel.org
Date Record Created
20250502	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250502)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)