CVE-2023-54168 - Vulnerability Details

- RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()

The ucmd->log_sq_bb_count variable is controlled by the user so this
shift can wrap. Fix it by using check_shl_overflow() in the same way
that it was done in commit 515f60004ed9 ("RDMA/hns: Prevent undefined
behavior in hns_roce_set_user_sq_size()").

Published: 2025-12-30

Score: 7.0 High

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`839041329fd3410e07d614f81e75bb43367d8f89`	affected	< 3d5ae269c4bd392ec1edbfb3bd031b8f42d7feff
`839041329fd3410e07d614f81e75bb43367d8f89`	affected	< 8feca625900777e02a449e53fe4121339934c38a
`839041329fd3410e07d614f81e75bb43367d8f89`	affected	< 9ad3221c86cc9c6305594b742d4a72dfbd4ea579
`839041329fd3410e07d614f81e75bb43367d8f89`	affected	< 9911be2155720221a4f1f722b22bd0e2388d8bcf
`839041329fd3410e07d614f81e75bb43367d8f89`	affected	< 3ce0df3493277b9df275cb8455d9c677ae701230
`839041329fd3410e07d614f81e75bb43367d8f89`	affected	< 196a6df08b08699ace4ce70e1efcdd9081b6565f
`839041329fd3410e07d614f81e75bb43367d8f89`	affected	< a183905869e692b6b7805b7472235585eff8e429
`839041329fd3410e07d614f81e75bb43367d8f89`	affected	< d50b3c73f1ac20dabc53dc6e9d64ce9c79a331eb

Linux

affected

Version	Status	Constraints
`2.6.24`	affected	—
`0`	unaffected	< 2.6.24
`4.19.283`	unaffected	≤ 4.19.*
`5.4.243`	unaffected	≤ 5.4.*
`5.10.180`	unaffected	≤ 5.10.*
`5.15.111`	unaffected	≤ 5.15.*
`6.1.28`	unaffected	≤ 6.1.*
`6.2.15`	unaffected	≤ 6.2.*
`6.3.2`	unaffected	≤ 6.3.*
`6.4`	unaffected	≤ *

No data.

No data available yet.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00047.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/196a6df08b08699ace4ce70e1efcdd9081b6565f
https://git.kernel.org/stable/c/3ce0df3493277b9df275cb8455d9c677ae701230
https://git.kernel.org/stable/c/3d5ae269c4bd392ec1edbfb3bd031b8f42d7feff
https://git.kernel.org/stable/c/8feca625900777e02a449e53fe4121339934c38a
https://git.kernel.org/stable/c/9911be2155720221a4f1f722b22bd0e2388d8bcf
https://git.kernel.org/stable/c/9ad3221c86cc9c6305594b742d4a72dfbd4ea579
https://git.kernel.org/stable/c/a183905869e692b6b7805b7472235585eff8e429
https://git.kernel.org/stable/c/d50b3c73f1ac20dabc53dc6e9d64ce9c79a331eb
https://lore.kernel.org/linux-cve-announce/2025123020-CVE-2023-54168-eba2@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-54168
https://www.cve.org/CVERecord?id=CVE-2023-54168

History

Wed, 31 Dec 2025 12:15:00 +0000

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2025123020-CVE-2023-54168-eba2@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2023-54168 https://www.cve.org/CVERecord?id=CVE-2023-54168
Metrics	threat_severity `None`	cvssV3_1 `{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}` threat_severity `Important`

Tue, 30 Dec 2025 12:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() The ucmd->log_sq_bb_count variable is controlled by the user so this shift can wrap. Fix it by using check_shl_overflow() in the same way that it was done in commit 515f60004ed9 ("RDMA/hns: Prevent undefined behavior in hns_roce_set_user_sq_size()").
Title		RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/196a6df08b08699ace4ce70e1efcdd9081b6565f https://git.kernel.org/stable/c/3ce0df3493277b9df275cb8455d9c677ae701230 https://git.kernel.org/stable/c/3d5ae269c4bd392ec1edbfb3bd031b8f42d7feff https://git.kernel.org/stable/c/8feca625900777e02a449e53fe4121339934c38a https://git.kernel.org/stable/c/9911be2155720221a4f1f722b22bd0e2388d8bcf https://git.kernel.org/stable/c/9ad3221c86cc9c6305594b742d4a72dfbd4ea579 https://git.kernel.org/stable/c/a183905869e692b6b7805b7472235585eff8e429 https://git.kernel.org/stable/c/d50b3c73f1ac20dabc53dc6e9d64ce9c79a331eb

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-12-30T12:08:43.394Z

Updated: 2026-05-11T19:56:45.977Z

Reserved: 2025-12-30T12:06:44.495Z

Link: CVE-2023-54168

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2025-12-30T13:16:04.610

Modified: 2026-04-15T00:35:42.020

Link: CVE-2023-54168

Redhat

Severity : Important

Publid Date: 2025-12-30T00:00:00Z

Links: CVE-2023-54168 - Bugzilla

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

Tracking

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object