CVE-2023-53528

In the Linux kernel, the following vulnerability has been resolved:

RDMA/rxe: Fix unsafe drain work queue code

If create_qp does not fully succeed it is possible for qp cleanup code to attempt to drain the send or recv work queues before the queues have been created causing a seg fault. This patch checks to see if the queues exist before attempting to drain them.

The patch fixes a NULL dereference / crash in the rxe (software RDMA) driver: if QP creation fails part-way, the cleanup path tried to drain send/recv queues that might never have been created, leading to a kernel oops. Impact is kernel DoS when userspace can exercise rxe verbs (e.g., create a QP that fails then triggers cleanup). This requires a local process with access to the RDMA/uverbs device on a system with the rxe driver loaded.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.