CVE-2023-53488
published 2025-10-01CVE-2023-53488: In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix possible panic during hotplug remove During hotplug remove it is possible that…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.15%
4.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
IB/hfi1: Fix possible panic during hotplug remove
During hotplug remove it is possible that the update counters work
might be pending, and may run after memory has been freed.
Cancel the update counters work before freeing memory.
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.52-1 (bookworm) | linux 6.1.52-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 7724105686e718ac476a6ad3304fea2fbcfcffde < 5e72f33ddfdb69cb21c1b59d31bbd3498d31b14a | 5e72f33ddfdb69cb21c1b59d31bbd3498d31b14a |
| linux | linux | >= 7724105686e718ac476a6ad3304fea2fbcfcffde < bfd727ad8411995218f336ead9f2becfde7f3a89 | bfd727ad8411995218f336ead9f2becfde7f3a89 |
| linux | linux | >= 7724105686e718ac476a6ad3304fea2fbcfcffde < c2145b18740c7e697748e4005ce93a5c683c86a8 | c2145b18740c7e697748e4005ce93a5c683c86a8 |
| linux | linux | >= 7724105686e718ac476a6ad3304fea2fbcfcffde < 33c677d1e087e437c7dcaad8d73402cf6add282e | 33c677d1e087e437c7dcaad8d73402cf6add282e |
| linux | linux | >= 7724105686e718ac476a6ad3304fea2fbcfcffde < 918c1e6843b7e81d0e5cf7994f41f28dc34c98b0 | 918c1e6843b7e81d0e5cf7994f41f28dc34c98b0 |
| linux | linux | >= 7724105686e718ac476a6ad3304fea2fbcfcffde < ac6640f4193d0f5b44269a7f08372909f9a18e5c | ac6640f4193d0f5b44269a7f08372909f9a18e5c |
| linux | linux | >= 7724105686e718ac476a6ad3304fea2fbcfcffde < d32a5e9b825d40c08a43dfbcba007159fed41a5d | d32a5e9b825d40c08a43dfbcba007159fed41a5d |
| linux | linux | >= 7724105686e718ac476a6ad3304fea2fbcfcffde < 4fdfaef71fced490835145631a795497646f4555 | 4fdfaef71fced490835145631a795497646f4555 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.191-1 | 5.10.191-1 |
| linux | linux_kernel | >= 0 < 6.1.52-1 | 6.1.52-1 |
| linux | linux_kernel | >= 0 < 6.4.11-1 | 6.4.11-1 |
| linux | linux_kernel | >= 0 < 6.4.11-1 | 6.4.11-1 |
| linux | linux_kernel | >= 4.15 < 4.19.292 | 4.19.292 |
| linux | linux_kernel | >= 4.20 < 5.4.254 | 5.4.254 |
| linux | linux_kernel | >= 4.3 < 4.14.323 | 4.14.323 |
| linux | linux_kernel | >= 5.11 < 5.15.127 | 5.15.127 |
| linux | linux_kernel | >= 5.16 < 6.1.46 | 6.1.46 |
| linux | linux_kernel | >= 5.5 < 5.10.191 | 5.10.191 |
| linux | linux_kernel | >= 6.2 < 6.4.11 | 6.4.11 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2023-53488: In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix possible panic during hotplug remove During hotplug remove it is poss
osv·2025-10-01·CVSS 5.5
CVE-2023-53488 [MEDIUM] CVE-2023-53488: In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix possible panic during hotplug remove During hotplug remove it is poss
In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix possible panic during hotplug remove During hotplug remove it is possible that the update counters work might be pending, and may run after memory has been freed. Cancel the update counters work before freeing memory.
GHSA
GHSA-67pv-grc5-6pf5: In the Linux kernel, the following vulnerability has been resolved:
IB/hfi1: Fix possible panic during hotplug remove
During hotplug remove it is po
ghsa_unreviewed·2025-10-01
CVE-2023-53488 [MEDIUM] GHSA-67pv-grc5-6pf5: In the Linux kernel, the following vulnerability has been resolved:
IB/hfi1: Fix possible panic during hotplug remove
During hotplug remove it is po
In the Linux kernel, the following vulnerability has been resolved:
IB/hfi1: Fix possible panic during hotplug remove
During hotplug remove it is possible that the update counters work
might be pending, and may run after memory has been freed.
Cancel the update counters work before freeing memory.
Red Hat
kernel: IB/hfi1: Fix possible panic during hotplug remove
vendor_redhat·2025-10-01·CVSS 5.5
CVE-2023-53488 [MEDIUM] CWE-664 kernel: IB/hfi1: Fix possible panic during hotplug remove
kernel: IB/hfi1: Fix possible panic during hotplug remove
In the Linux kernel, the following vulnerability has been resolved:
IB/hfi1: Fix possible panic during hotplug remove
During hotplug remove it is possible that the update counters work
might be pending, and may run after memory has been freed.
Cancel the update counters work before freeing memory.
Statement: The patch fixes a race between queued update_cntr_work and device teardown in the hfi1 driver by calling cancel_work_sync() before freeing memory.
Impact is a potential kernel panic (availability only) during hot-unplug or driver removal.
For the CVSS the PR:H because triggering requires administrative capabilities (e.g., hot-unplug/unbind/rmmod of the hfi1 device) and thus is limited to privileged users on systems with this h
Debian
CVE-2023-53488: linux - In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fi...
vendor_debian·2023·CVSS 5.5
CVE-2023-53488 [MEDIUM] CVE-2023-53488: linux - In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fi...
In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix possible panic during hotplug remove During hotplug remove it is possible that the update counters work might be pending, and may run after memory has been freed. Cancel the update counters work before freeing memory.
Scope: local
bookworm: resolved (fixed in 6.1.52-1)
bullseye: resolved (fixed in 5.10.191-1)
forky: resolved (fixed in 6.4.11-1)
sid: resolved (fixed in 6.4.11-1)
trixie: resolved (fixed in 6.4.11-1)
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/33c677d1e087e437c7dcaad8d73402cf6add282ehttps://git.kernel.org/stable/c/4fdfaef71fced490835145631a795497646f4555https://git.kernel.org/stable/c/5e72f33ddfdb69cb21c1b59d31bbd3498d31b14ahttps://git.kernel.org/stable/c/918c1e6843b7e81d0e5cf7994f41f28dc34c98b0https://git.kernel.org/stable/c/ac6640f4193d0f5b44269a7f08372909f9a18e5chttps://git.kernel.org/stable/c/bfd727ad8411995218f336ead9f2becfde7f3a89https://git.kernel.org/stable/c/c2145b18740c7e697748e4005ce93a5c683c86a8https://git.kernel.org/stable/c/d32a5e9b825d40c08a43dfbcba007159fed41a5d
2025-10-01
Published