CVE-2023-54168

Linux Kernel - Integer Overflow in RDMA/mlx4 set_user_sq_size()

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() The ucmd->log_sq_bb_count variable is controlled by the user so this shift can wrap. Fix it by using check_shl_overflow() in the same way that it was done in commit 515f60004ed9 ("RDMA/hns: Prevent undefined behavior in hns_roce_set_user_sq_size()").

References (8)

Core 8

Scores

EPSS 0.0018
EPSS Percentile 8.2%

Details

Status published
Products (25)
linux/Kernel 2.6.24 - 4.19.283linux
linux/Kernel 4.20.0 - 5.4.243linux
linux/Kernel 5.11.0 - 5.15.111linux
linux/Kernel 5.16.0 - 6.1.28linux
linux/Kernel 5.5.0 - 5.10.180linux
linux/Kernel 6.2.0 - 6.2.15linux
linux/Kernel 6.3.0 - 6.3.2linux
Linux/Linux < 2.6.24
Linux/Linux 2.6.24
Linux/Linux 4.19.283 - 4.19.*
... and 15 more
Published Dec 30, 2025
Tracked Since Feb 18, 2026