CVE-2023-53811— RDMA/irdma: Cap MSIX used to online CPUs + 1
Quick assessment
Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于irdma驱动未限制MSIX向量数量，可能导致CPU掩码越界。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 10
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 44d9e52977a1b90b0db1c7f8b197c218e9226520< 87674a359ad173a3b8cd484e92e4f1901666da4c |
affected |
44d9e52977a1b90b0db1c7f8b197c218e9226520< b3bd44bf20cb3a6a47aa4373e1817147efb4be04 |
affected | ||
44d9e52977a1b90b0db1c7f8b197c218e9226520< 209e4aa9a7b636d8aaa1297e1d089ee2ed91d73f |
affected | ||
44d9e52977a1b90b0db1c7f8b197c218e9226520< 9cd9842c46996ef62173c36619c746f57416bcb0 |
affected | ||
5.14 |
affected | ||
< 5.14 |
unaffected | ||
5.15.99≤ 5.15.* |
unaffected | ||
6.1.16≤ 6.1.* |
unaffected | ||
| … +2 more rows | |||
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-53811
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
RDMA/irdma: Cap MSIX used to online CPUs + 1
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: Cap MSIX used to online CPUs + 1
The irdma driver can use a maximum number of msix vectors equal
to num_online_cpus() + 1 and the kernel warning stack below is shown
if that number is exceeded.
The kernel throws a warning as the driver tries to update the affinity
hint with a CPU mask greater than the max CPU IDs. Fix this by capping
the MSIX vectors to num_online_cpus() + 1.
WARNING: CPU: 7 PID: 23655 at include/linux/cpumask.h:106 irdma_cfg_ceq_vector+0x34c/0x3f0 [irdma]
RIP: 0010:irdma_cfg_ceq_vector+0x34c/0x3f0 [irdma]
Call Trace:
irdma_rt_init_hw+0xa62/0x1290 [irdma]
? irdma_alloc_local_mac_entry+0x1a0/0x1a0 [irdma]
? __is_kernel_percpu_address+0x63/0x310
? rcu_read_lock_held_common+0xe/0xb0
? irdma_lan_unregister_qset+0x280/0x280 [irdma]
? irdma_request_reset+0x80/0x80 [irdma]
? ice_get_qos_params+0x84/0x390 [ice]
irdma_probe+0xa40/0xfc0 [irdma]
? rcu_read_lock_bh_held+0xd0/0xd0
? irdma_remove+0x140/0x140 [irdma]
? rcu_read_lock_sched_held+0x62/0xe0
? down_write+0x187/0x3d0
? auxiliary_match_id+0xf0/0x1a0
? irdma_remove+0x140/0x140 [irdma]
auxiliary_bus_probe+0xa6/0x100
__driver_probe_device+0x4a4/0xd50
? __device_attach_driver+0x2c0/0x2c0
driver_probe_device+0x4a/0x110
__driver_attach+0x1aa/0x350
bus_for_each_dev+0x11d/0x1b0
? subsys_dev_iter_init+0xe0/0xe0
bus_add_driver+0x3b1/0x610
driver_register+0x18e/0x410
? 0xffffffffc0b88000
irdma_init_module+0x50/0xaa [irdma]
do_one_initcall+0x103/0x5f0
? perf_trace_initcall_level+0x420/0x420
? do_init_module+0x4e/0x700
? __kasan_kmalloc+0x7d/0xa0
? kmem_cache_alloc_trace+0x188/0x2b0
? kasan_unpoison+0x21/0x50
do_init_module+0x1d1/0x700
load_module+0x3867/0x5260
? layout_and_allocate+0x3990/0x3990
? rcu_read_lock_held_common+0xe/0xb0
? rcu_read_lock_sched_held+0x62/0xe0
? rcu_read_lock_bh_held+0xd0/0xd0
? __vmalloc_node_range+0x46b/0x890
? lock_release+0x5c8/0xba0
? alloc_vm_area+0x120/0x120
? selinux_kernel_module_from_file+0x2a5/0x300
? __inode_security_revalidate+0xf0/0xf0
? __do_sys_init_module+0x1db/0x260
__do_sys_init_module+0x1db/0x260
? load_module+0x5260/0x5260
? do_syscall_64+0x22/0x450
do_syscall_64+0xa5/0x450
entry_SYSCALL_64_after_hwframe+0x66/0xdb
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于irdma驱动未限制MSIX向量数量，可能导致CPU掩码越界。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2023-53811
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-53811
请登录查看更多情报信息。
Same Patch Batch · Linux · 2025-12-09 · 152 CVEs total
| CVE-2022-50666 | 9.8 CRITICAL | RDMA/siw: Fix QP destroy to wait for all references dropped. |
| CVE-2025-40343 | 9.8 CRITICAL | nvmet-fc: avoid scheduling association deletion twice |
| CVE-2023-53794 | 9.8 CRITICAL | cifs: fix session state check in reconnect to avoid use-after-free issue |
| CVE-2025-40342 | 8.8 HIGH | nvme-fc: use lock accessing port_state and rport state |
| CVE-2023-53822 | 8.8 HIGH | wifi: ath11k: Ignore frags from uninitialized peer in dp. |
| CVE-2023-53785 | 8.8 HIGH | mt76: mt7921: don't assume adequate headroom for SDIO headers |
| CVE-2025-40336 | 8.8 HIGH | drm/gpusvm: fix hmm_pfn_to_map_order() usage |
| CVE-2023-53827 | 8.8 HIGH | Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} |
| CVE-2025-40328 | 8.8 HIGH | smb: client: fix potential UAF in smb2_close_cached_fid() |
| CVE-2023-53851 | 8.4 HIGH | drm/msm/dp: Drop aux devices together with DP controller |
| CVE-2025-40337 | 8.2 HIGH | net: stmmac: Correctly handle Rx checksum offload errors |
| CVE-2022-50656 | 8.1 HIGH | nfc: pn533: Clear nfc_target before being used |
| CVE-2023-53803 | 8.1 HIGH | scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() |
| CVE-2023-53800 | 7.8 HIGH | ubi: Fix use-after-free when volume resizing failed |
| CVE-2023-53860 | 7.8 HIGH | dm: don't attempt to queue IO under RCU protection |
| CVE-2023-53829 | 7.8 HIGH | f2fs: flush inode if atomic file is aborted |
| CVE-2023-53790 | 7.8 HIGH | bpf: Zeroing allocated object from slab in bpf memory allocator |
| CVE-2023-53836 | 7.8 HIGH | bpf, sockmap: Fix skb refcnt race after locking changes |
| CVE-2023-53810 | 7.8 HIGH | blk-mq: release crypto keyslot before reporting I/O complete |
| CVE-2023-53846 | 7.8 HIGH | f2fs: fix to do sanity check on direct node in truncate_dnode() |
Showing top 20 of 152 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
-
CVE-2026-98868
dm-pcache: reject a kset that overruns its segment -
CVE-2026-98867
dm-pcache: bound the logical key offset from persistent memo -
CVE-2026-98866
sched/cache: Introduce task_struct->sched_cache_grp to fix U -
CVE-2026-98865
sched_ext: Don't run ops.dequeue() with a DSQ lock held -
CVE-2026-98864
sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing
Same vendor: Linux
-
CVE-2026-98868
dm-pcache: reject a kset that overruns its segment -
CVE-2026-98867
dm-pcache: bound the logical key offset from persistent memo -
CVE-2026-98866
sched/cache: Introduce task_struct->sched_cache_grp to fix U -
CVE-2026-98865
sched_ext: Don't run ops.dequeue() with a DSQ lock held -
CVE-2026-98864
sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing
V. Comments for CVE-2023-53811
No comments yet