RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()

MITRE NVD CVE.ORG JSON API

Summary

CVECVE-2023-54168
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2025-12-30 13:16:04 UTC
Updated2026-10-15 22:17:54 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() The ucmd->log_sq_bb_count variable is controlled by the user so this shift can wrap. Fix it by using check_shl_overflow() in the same way that it was done in commit 515f60004ed9 ("RDMA/hns: Prevent undefined behavior in hns_roce_set_user_sq_size()").

Risk And Classification

Primary CVSS: v3.1 7.8 HIGH from 416baaa9-dc9f-4396-8d5f-8c081fb06d67

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.001340000 probability, percentile 0.033210000 (date 2026-08-06)

VersionSourceTypeScoreSeverityVector
3.1416baaa9-dc9f-4396-8d5f-8c081fb06d67Secondary7.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
3.1CNADECLARED7.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 Breakdown

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected 839041329fd3410e07d614f81e75bb43367d8f89 3d5ae269c4bd392ec1edbfb3bd031b8f42d7feff git Not specified
CNA Linux Linux affected 839041329fd3410e07d614f81e75bb43367d8f89 8feca625900777e02a449e53fe4121339934c38a git Not specified
CNA Linux Linux affected 839041329fd3410e07d614f81e75bb43367d8f89 9ad3221c86cc9c6305594b742d4a72dfbd4ea579 git Not specified
CNA Linux Linux affected 839041329fd3410e07d614f81e75bb43367d8f89 9911be2155720221a4f1f722b22bd0e2388d8bcf git Not specified
CNA Linux Linux affected 839041329fd3410e07d614f81e75bb43367d8f89 3ce0df3493277b9df275cb8455d9c677ae701230 git Not specified
CNA Linux Linux affected 839041329fd3410e07d614f81e75bb43367d8f89 196a6df08b08699ace4ce70e1efcdd9081b6565f git Not specified
CNA Linux Linux affected 839041329fd3410e07d614f81e75bb43367d8f89 a183905869e692b6b7805b7472235585eff8e429 git Not specified
CNA Linux Linux affected 839041329fd3410e07d614f81e75bb43367d8f89 d50b3c73f1ac20dabc53dc6e9d64ce9c79a331eb git Not specified
CNA Linux Linux affected 2.6.24 Not specified
CNA Linux Linux unaffected 2.6.24 semver Not specified
CNA Linux Linux unaffected 4.19.283 4.19.* semver Not specified
CNA Linux Linux unaffected 5.4.243 5.4.* semver Not specified
CNA Linux Linux unaffected 5.10.180 5.10.* semver Not specified
CNA Linux Linux unaffected 5.15.111 5.15.* semver Not specified
CNA Linux Linux unaffected 6.1.28 6.1.* semver Not specified
CNA Linux Linux unaffected 6.2.15 6.2.* semver Not specified
CNA Linux Linux unaffected 6.3.2 6.3.* semver Not specified
CNA Linux Linux unaffected 6.4 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/d50b3c73f1ac20dabc53dc6e9d64ce9c79a331eb 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/3d5ae269c4bd392ec1edbfb3bd031b8f42d7feff 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/a183905869e692b6b7805b7472235585eff8e429 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/8feca625900777e02a449e53fe4121339934c38a 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/3ce0df3493277b9df275cb8455d9c677ae701230 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/9ad3221c86cc9c6305594b742d4a72dfbd4ea579 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/9911be2155720221a4f1f722b22bd0e2388d8bcf 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/196a6df08b08699ace4ce70e1efcdd9081b6565f 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report