CVE-2023-53286

A flaw was found in the Linux kernel mlx5 RDMA driver. Destroying a queue pair or receive queue ignores a firmware failure and reports success. A local user of that RDMA device can leave the queue allocated while the caller treats it as destroyed.

mlx5 now returns the firmware’s destroy QP/RQ status to upper layers, preventing silent failures that previously left RDMA objects half-alive and could trigger kernel WARNs. This is a local robustness fix: exploitation requires local RDMA device access and at worst results in a DoS/inconsistent state.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.