{"id":"CVE-2023-53110","revision":"8030b58361cc41c7aef5085de281d948","records":[{"revision":"8030b58361cc41c7aef5085de281d948","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2023-53110","aliases":[],"title":"net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler()\n\nWhen performing a stress test on SMC-R by rmmod mlx5_ib driver\nduring the wrk/nginx test, we found that there is a probability\nof triggering a panic while terminating all link groups.\n\nThis issue dues to the race between smc_smcr_terminate_all()\nand smc_buf_create().\n\n\t\t\tsmc_smcr_terminate_all\n\nsmc_buf_create\n/* init */\nconn->sndbuf_desc = NULL;\n...\n\n\t\t\t__smc_lgr_terminate\n\t\t\t\tsmc_conn_kill\n\t\t\t\t\tsmc_close_abort\n\t\t\t\t\t\tsmc_cdc_get_slot_and_msg_send\n\n\t\t\t__softirqentry_text_start\n\t\t\t\tsmc_wr_tx_process_cqe\n\t\t\t\t\tsmc_cdc_tx_handler\n\t\t\t\t\t\tREAD(conn->sndbuf_desc->len);\n\t\t\t\t\t\t/* panic dues to NULL sndbuf_desc */\n\nconn->sndbuf_desc = xxx;\n\nThis patch tries to fix the issue by always to check the sndbuf_desc\nbefore send any cdc msg, to make sure that no null pointer is\nseen during cqe processing.","state":0,"publishedAt":"2025-05-02T15:55:50.367+00:00","modifiedAt":"2026-10-15T21:41:26.885+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/smc/smc_cdc.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"0b29ec6436138721acf5844e558f7334a0fa61d5\",\n                            \"lessThan\": \"31817c530768b0199771ec6019571b4f0ddbf230\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"0b29ec6436138721acf5844e558f7334a0fa61d5\",\n                            \"lessThan\": \"b108bd9e6be000492ebebe867daa699285978a10\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"0b29ec6436138721acf5844e558f7334a0fa61d5\",\n                            \"lessThan\": \"3c270435db8aa34929263dddae8fd050f5216ecb\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"0b29ec6436138721acf5844e558f7334a0fa61d5\",\n                            \"lessThan\": \"3ebac7cf0a184a8102821a7a00203f02bebda83c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"0b29ec6436138721acf5844e558f7334a0fa61d5\",\n                            \"lessThan\": \"22a825c541d775c1dbe7b2402786025acad6727b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/smc/smc_cdc.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.5\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.5\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.176\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.104\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.21\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.2.8\",\n                            \"lessThanOrEqual\": \"6.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/31817c530768b0199771ec6019571b4f0ddbf230","https://git.kernel.org/stable/c/b108bd9e6be000492ebebe867daa699285978a10","https://git.kernel.org/stable/c/3c270435db8aa34929263dddae8fd050f5216ecb","https://git.kernel.org/stable/c/3ebac7cf0a184a8102821a7a00203f02bebda83c","https://git.kernel.org/stable/c/22a825c541d775c1dbe7b2402786025acad6727b"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2023-53110","license":"CVE Program Terms of Use","key":"cve-program:CVE-2023-53110","identifiers":["CVE-2023-53110"]},"retained":false,"historicalAffected":[]}],"coverage":[]}