CVE-2023-54028

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel’s RDMA/rxe component related to the handling of queue pair (QP) cleanup. Specifically, an error can occur when attempting to register a non-static key during the rxe cleanup task() function. This happens if an error occurs before the rxe init task() function is executed, leading to an attempt to access an uninitialized spinlock during the cleanup process. The vulnerable function is rxe create qp(), which calls rxe qp from init() and subsequently rxe init task().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.