Unsafe Work Queue Handling in Linux Kernel RDMA Product

CVE-2023-53528

What is CVE-2023-53528?

A vulnerability in the Linux kernel's RDMA subsystem allows potential segmentation faults due to improper handling of work queues. Specifically, if the function create_qp fails to execute fully, the cleanup process may erroneously attempt to drain send or receive work queues that have not been created. This oversight could lead to instability and system crashes. A patch has been implemented to check the existence of these queues before attempting to perform the drain action, enhancing the stability of the kernel in RDMA operations.

References