CVE-2023-54028

Linux Kernel 4.8-6.1.31, 6.2.0-6.2.14, 6.3.0-6.3.1 - Use-After-Free in rxe_cleanup_task

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task" In the function rxe_create_qp(), rxe_qp_from_init() is called to initialize qp, internally things like rxe_init_task are not setup until rxe_qp_init_req(). If an error occurred before this point then the unwind will call rxe_cleanup() and eventually to rxe_qp_do_cleanup()/rxe_cleanup_task() which will oops when trying to access the uninitialized spinlock. If rxe_init_task is not executed, rxe_cleanup_task will not be called.

Scores

EPSS 0.0017
EPSS Percentile 6.7%

Details

Status published
Products (13)
linux/Kernel 4.8.0 - 6.1.32linux
linux/Kernel 6.2.0 - 6.2.15linux
linux/Kernel 6.3.0 - 6.3.2linux
Linux/Linux < 4.8
Linux/Linux 4.8
Linux/Linux 6.1.32 - 6.1.*
Linux/Linux 6.2.15 - 6.2.*
Linux/Linux 6.3.2 - 6.3.*
Linux/Linux 6.4
Linux/Linux 8700e3e7c4857d28ebaa824509934556da0b3e76 - 0d938264fcfe4927e54f0e519da05af1d5d720b4
... and 3 more
Published Dec 24, 2025
Tracked Since Feb 18, 2026