Linux Kernel Vulnerability in Mellanox's BlueField SoC Driver

CVE-2023-53507

What is CVE-2023-53507?

A vulnerability exists in the Linux kernel's mlx5 driver pertaining to the improper handling of devlink parameters. When an interface is down, the mlx5 driver fails to unregister its devlink parameters, leading to potential warnings and possible performance degradation during system operations. The fix involves ensuring that devlink parameters are unregistered correctly even when the interface is not active, thus enhancing system stability and preventing unnecessary warnings.

References