CVE-2023-53530

published 2025-10-01

CVE-2023-53530: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() The following call…

Priority P4 20 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

In the Linux kernel, the following vulnerability has been resolved:

scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id()

The following call trace was observed:

localhost kernel: nvme nvme0: NVME-FC{0}: controller connect complete
localhost kernel: BUG: using smp_processor_id() in preemptible [00000000] code: kworker/u129:4/75092
localhost kernel: nvme nvme0: NVME-FC{0}: new ctrl: NQN "nqn.1992-08.com.netapp:sn.b42d198afb4d11ecad6d00a098d6abfa:subsystem.PR_Channel2022_RH84_subsystem_291"
localhost kernel: caller is qla_nvme_post_cmd+0x216/0x1380 [qla2xxx]
localhost kernel: CPU: 6 PID: 75092 Comm: kworker/u129:4 Kdump: loaded Tainted: G B W OE --------- --- 5.14.0-70.22.1.el9_0.x86_64+debug #1
localhost kernel: Hardware name: HPE ProLiant XL420 Gen10/ProLiant XL420 Gen10, BIOS U39 01/13/2022
localhost kernel: Workqueue: nvme-wq nvme_async_event_work [nvme_core]
localhost kernel: Call Trace:
localhost kernel: dump_stack_lvl+0x57/0x7d
localhost kernel: check_preemption_disabled+0xc8/0xd0
localhost kernel: qla_nvme_post_cmd+0x216/0x1380 [qla2xxx]

Use raw_smp_processor_id() instead of smp_processor_id().

Also use queue_work() across the driver instead of queue_work_on() thus
avoiding usage of smp_processor_id() when CONFIG_DEBUG_PREEMPT is enabled.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
debian	linux	< linux 6.5.6-1 (forky)	linux 6.5.6-1 (forky)
linux	linux	—	—
linux	linux	>= 1d201c81d4cc6840735bbcc99e6031503e5cf3b8 < 25bd0c7def04a272f8e89b36971712fe29c6e438	25bd0c7def04a272f8e89b36971712fe29c6e438
linux	linux	>= 1d201c81d4cc6840735bbcc99e6031503e5cf3b8 < 59f10a05b5c7b675256a66e3161741239889ff80	59f10a05b5c7b675256a66e3161741239889ff80
linux	linux	>= 35c02a333d523d9da0b482b0d751cdeb95c068ae < 52c7b41ad6ee53222f4ee2f0c099a6ed8291a168	52c7b41ad6ee53222f4ee2f0c099a6ed8291a168
linux	linux	>= 532a239605667320f4fd7473e416b718d0a2fbbb < 1a541999f31fcb10ea50eba2a563e6c451fd5c7d	1a541999f31fcb10ea50eba2a563e6c451fd5c7d
linux	linux_kernel	—	—
linux	linux_kernel	>= 0 < 6.5.6-1	6.5.6-1
linux	linux_kernel	>= 0 < 6.5.6-1	6.5.6-1
linux	linux_kernel	>= 6.3 < 6.5.5	6.5.5

CVSS provenance

nvd v3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

osv 5.5 MEDIUM

vendor_debian 5.5 LOW

vendor_redhat 5.5 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-663