Null Pointer Dereference in Linux Kernel's RDMA Component Affecting CXGB4

CVE-2023-53335

What is CVE-2023-53335?

A potential null pointer dereference vulnerability exists in the RDMA/cxgb4 component of the Linux kernel. If the function get_ep_from_tid() fails to retrieve a valid endpoint, the subsequent operations could dereference a null pointer, leading to undefined behavior or system instability. The patch addresses this issue by implementing a sanity check to validate the endpoint before it is used, ensuring enhanced stability and security.

References