CVE-2023-53340
Published: Sep 17, 2025
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Collect command failures data only for known commands DEVX can issue a general command, which is not used by mlx5 driver. In case such command is failed, mlx5 is trying to collect the failure data, However, mlx5 doesn't create a storage for this command, since mlx5 doesn't use it. This lead to array-index-out-of-bounds error. Fix it by checking whether the command is known before collecting the failure data.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 34f46ae0d4b38e83cfb26fb6f06b5b5efea47fdc - < 411e4d6caa7f7169192b8dacc8421ac4fd64a354affected 34f46ae0d4b38e83cfb26fb6f06b5b5efea47fdc - < d8b6f175235d7327b4e1b13216859e89496dfbd5affected 34f46ae0d4b38e83cfb26fb6f06b5b5efea47fdc - < 2a0a935fb64ee8af253b9c6133bb6702fb152ac2 |
Linux | Linux | affected 5.18unaffected 0 - < 5.18unaffected 6.1.31 - <= 6.1.*unaffected 6.3.5 - <= 6.3.*unaffected 6.4 - <= * |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now