CVE-2023-54028
Linux Kernel 4.8-6.1.31, 6.2.0-6.2.14, 6.3.0-6.3.1 - Use-After-Free in rxe_cleanup_task
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task" In the function rxe_create_qp(), rxe_qp_from_init() is called to initialize qp, internally things like rxe_init_task are not setup until rxe_qp_init_req(). If an error occurred before this point then the unwind will call rxe_cleanup() and eventually to rxe_qp_do_cleanup()/rxe_cleanup_task() which will oops when trying to access the uninitialized spinlock. If rxe_init_task is not executed, rxe_cleanup_task will not be called.
References (4)
Core 4
Core References
Scores
EPSS
0.0017
EPSS Percentile
6.7%
Details
Status
published
Products (13)
linux/Kernel
4.8.0 - 6.1.32linux
linux/Kernel
6.2.0 - 6.2.15linux
linux/Kernel
6.3.0 - 6.3.2linux
Linux/Linux
< 4.8
Linux/Linux
4.8
Linux/Linux
6.1.32 - 6.1.*
Linux/Linux
6.2.15 - 6.2.*
Linux/Linux
6.3.2 - 6.3.*
Linux/Linux
6.4
Linux/Linux
8700e3e7c4857d28ebaa824509934556da0b3e76 - 0d938264fcfe4927e54f0e519da05af1d5d720b4
... and 3 more
Published
Dec 24, 2025
Tracked Since
Feb 18, 2026