CVE-2023-53811 — Improper Validation of Specified Index, Position, or Offset in Input in Linux
Severity
4.4MEDIUM
No vectorEPSS
0.0%
top 90.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 9
Description
In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: Cap MSIX used to online CPUs + 1
The irdma driver can use a maximum number of msix vectors equal
to num_online_cpus() + 1 and the kernel warning stack below is shown
if that number is exceeded.
The kernel throws a warning as the driver tries to update the affinity
hint with a CPU mask greater than the max CPU IDs. Fix this by capping
the MSIX vectors to num_online_cpus() + 1.
WARNING: CPU: 7 PID: 23655 at include…
Affected Packages4 packages
▶CVEListV5linux/linux44d9e52977a1b90b0db1c7f8b197c218e9226520 — 87674a359ad173a3b8cd484e92e4f1901666da4c+4
🔴Vulnerability Details
3GHSA▶
GHSA-4q86-c76w-9mx5: In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: Cap MSIX used to online CPUs + 1
The irdma driver can use a maximum↗2025-12-09
OSV▶
CVE-2023-53811: In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Cap MSIX used to online CPUs + 1 The irdma driver can use a maximum nu↗2025-12-09