Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2023-53393— RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device

AI Predicted 4.7 Difficulty: Trivial EPSS 0.14% · P3

Affected Version Matrix 10

VendorProductVersion RangeStatus
LinuxLinuxaac4492ef23a176b6f1a41aadb99177eceb1fc06< 8d89870d63758363b07ace5c2df82d6bf865f78baffected
aac4492ef23a176b6f1a41aadb99177eceb1fc06< 9a97da4674b890b4c28f5f12beba8c33a9cd2f49affected
aac4492ef23a176b6f1a41aadb99177eceb1fc06< e597b003c736217b0c99ccf1b240c25009105238affected
aac4492ef23a176b6f1a41aadb99177eceb1fc06< 38b50aa44495d5eb4218f0b82fc2da76505cec53affected
4.16affected
< 4.16unaffected
5.15.87≤ 5.15.*unaffected
6.0.19≤ 6.0.*unaffected
… +2 more rows
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2023-53393

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device Currently, when mlx5_ib_get_hw_stats() is used for device (port_num = 0), there is a special handling in order to use the correct counters, but, port_num is being passed down the stack without any change. Also, some functions assume that port_num >=1. As a result, the following oops can occur. BUG: unable to handle page fault for address: ffff89510294f1a8 #PF: supervisor write access in kernel mode #PF: error_code(0x0002) - not-present page PGD 0 P4D 0 Oops: 0002 [#1] SMP CPU: 8 PID: 1382 Comm: devlink Tainted: G W 6.1.0-rc4_for_upstream_base_2022_11_10_16_12 #1 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 RIP: 0010:_raw_spin_lock+0xc/0x20 Call Trace: <TASK> mlx5_ib_get_native_port_mdev+0x73/0xe0 [mlx5_ib] do_get_hw_stats.constprop.0+0x109/0x160 [mlx5_ib] mlx5_ib_get_hw_stats+0xad/0x180 [mlx5_ib] ib_setup_device_attrs+0xf0/0x290 [ib_core] ib_register_device+0x3bb/0x510 [ib_core] ? atomic_notifier_chain_register+0x67/0x80 __mlx5_ib_add+0x2b/0x80 [mlx5_ib] mlx5r_probe+0xb8/0x150 [mlx5_ib] ? auxiliary_match_id+0x6a/0x90 auxiliary_bus_probe+0x3c/0x70 ? driver_sysfs_add+0x6b/0x90 really_probe+0xcd/0x380 __driver_probe_device+0x80/0x170 driver_probe_device+0x1e/0x90 __device_attach_driver+0x7d/0x100 ? driver_allows_async_probing+0x60/0x60 ? driver_allows_async_probing+0x60/0x60 bus_for_each_drv+0x7b/0xc0 __device_attach+0xbc/0x200 bus_probe_device+0x87/0xa0 device_add+0x404/0x940 ? dev_set_name+0x53/0x70 __auxiliary_device_add+0x43/0x60 add_adev+0x99/0xe0 [mlx5_core] mlx5_attach_device+0xc8/0x120 [mlx5_core] mlx5_load_one_devl_locked+0xb2/0xe0 [mlx5_core] devlink_reload+0x133/0x250 devlink_nl_cmd_reload+0x480/0x570 ? devlink_nl_pre_doit+0x44/0x2b0 genl_family_rcv_msg_doit.isra.0+0xc2/0x110 genl_rcv_msg+0x180/0x2b0 ? devlink_nl_cmd_region_read_dumpit+0x540/0x540 ? devlink_reload+0x250/0x250 ? devlink_put+0x50/0x50 ? genl_family_rcv_msg_doit.isra.0+0x110/0x110 netlink_rcv_skb+0x54/0x100 genl_rcv+0x24/0x40 netlink_unicast+0x1f6/0x2c0 netlink_sendmsg+0x237/0x490 sock_sendmsg+0x33/0x40 __sys_sendto+0x103/0x160 ? handle_mm_fault+0x10e/0x290 ? do_user_addr_fault+0x1c0/0x5f0 __x64_sys_sendto+0x25/0x30 do_syscall_64+0x3d/0x90 entry_SYSCALL_64_after_hwframe+0x46/0xb0 Fix it by setting port_num to 1 in order to get device status and remove unused variable.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于mlx5_ib_get_hw_stats函数处理设备统计信息时未正确验证端口号，可能导致空指针取消引用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux aac4492ef23a176b6f1a41aadb99177eceb1fc06 ~ 8d89870d63758363b07ace5c2df82d6bf865f78b -
LinuxLinux 4.16 -

II. Public POCs for CVE-2023-53393

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-53393

请登录查看更多情报信息。

Same Patch Batch · Linux · 2025-09-18 · 121 CVEs total

CVE-2022-504019.8 CRITICALnfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure
CVE-2023-533829.8 CRITICALnet/smc: Reset connection when trying to use SMCRv2 fails.
CVE-2022-504109.8 CRITICALNFSD: Protect against send buffer overflow in NFSv2 READ
CVE-2022-504198.8 HIGHBluetooth: hci_sysfs: Fix attempting to call device_add multiple times
CVE-2023-534318.8 HIGHscsi: ses: Handle enclosure with just a primary component gracefully
CVE-2023-534328.8 HIGHfirewire: net: fix use after free in fwnet_finish_incoming_packet()
CVE-2022-504138.8 HIGHwifi: mac80211: fix use-after-free
CVE-2022-503868.8 HIGHBluetooth: L2CAP: Fix user-after-free
CVE-2023-533748.8 HIGHBluetooth: hci_conn: fail SCO/ISO via hci_conn_failed if ACL gone early
CVE-2023-533728.2 HIGHsctp: fix a potential overflow in sctp_ifwdtsn_skip
CVE-2022-503997.8 HIGHmedia: atomisp: prevent integer overflow in sh_css_set_black_frame()
CVE-2023-533947.8 HIGHnet/mlx5e: xsk: Fix crash on regular rq reactivation
CVE-2023-534297.8 HIGHbtrfs: don't check PageError in __extent_writepage
CVE-2023-533737.8 HIGHcrypto: seqiv - Handle EBUSY correctly
CVE-2023-533987.8 HIGHmlx5: fix possible ptp queue fifo use-after-free
CVE-2022-504177.8 HIGHdrm/panfrost: Fix GEM handle creation ref-counting
CVE-2023-533877.8 HIGHscsi: ufs: core: Fix device management cmd timeout flow
CVE-2023-533887.8 HIGHdrm/mediatek: Clean dangling pointer on bind error path
CVE-2023-533867.8 HIGHBluetooth: Fix potential use-after-free when clear keys
CVE-2023-533787.8 HIGHdrm/i915/dpt: Treat the DPT BO as a framebuffer

Showing top 20 of 121 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2023-53393

No comments yet

Leave a comment