CVE-2023-53525

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16.0-rc3-syzkaller

Description The Linux kernel contains a flaw within the RDMA/cma subsystem. Specifically, the issue relates to allowing only UD qp type to join multicast, and setting qkey to default if it's not set, to fix an uninit-value error where the ib->rec.qkey field is accessed without being initialized. This can lead to a kernel memory safety issue, as indicated by a KMSAN report showing an uninit-value error in cma set qkey and cma make mc event. The issue occurs during multicast operations and involves the handling of the qkey field. The vulnerability is triggered during the rdma join multicast function.

Recommendations Update to a version newer than 5.16.0-rc3-syzkaller.