CVE-2023-54237

kernel: net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · December 30, 2025

Updated · August 5, 2026

Description

A race condition was found in the SMC (Shared Memory Communications) networking subsystem. The smc_llc_srv_add_link() function lacks proper locking, allowing concurrent link additions that can corrupt link group state and crash the kernel.

Statement

This affects systems using SMC for RDMA-based network communication. The race requires concurrent link group operations, typically occurring under high SMC connection load on enterprise systems with InfiniBand or RoCE adapters.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-413 · Improper Resource Locking