CVE-2023-54302

The Linux kernel contains a race condition vulnerability in its RDMA/irdma subsystem, where completion queue pair (CQP) completion statistics are read concurrently without adequate synchronization while being updated on another CPU. Under certain workloads, a lack of atomic operations and improper locking can lead to data inconsistency and unpredictable kernel behavior due to torn reads/writes and compiler optimization effects. This could potentially be exploited by a local user to trigger a kernel crash or denial of service (DoS) condition

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria, comprising ease of use and deployment, applicability to widespread installation base, or stability.