CVE-2023-54028
published 2025-12-24CVE-2023-54028: In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task" In the…
PriorityP419medium5.5
EPSS
0.17%
7.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task"
In the function rxe_create_qp(), rxe_qp_from_init() is called to
initialize qp, internally things like rxe_init_task are not setup until
rxe_qp_init_req().
If an error occurred before this point then the unwind will call
rxe_cleanup() and eventually to rxe_qp_do_cleanup()/rxe_cleanup_task()
which will oops when trying to access the uninitialized spinlock.
If rxe_init_task is not executed, rxe_cleanup_task will not be called.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.37-1 (bookworm) | linux 6.1.37-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < 3236221bb8e4de8e3d0c8385f634064fb26b8e38 | 3236221bb8e4de8e3d0c8385f634064fb26b8e38 |
| linux | linux | >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < c8473cd5b301279a41dc75e5afb26b3d5223b6c7 | c8473cd5b301279a41dc75e5afb26b3d5223b6c7 |
| linux | linux | >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < 0d938264fcfe4927e54f0e519da05af1d5d720b4 | 0d938264fcfe4927e54f0e519da05af1d5d720b4 |
| linux | linux | >= 8700e3e7c4857d28ebaa824509934556da0b3e76 < b2b1ddc457458fecd1c6f385baa9fbda5f0c63ad | b2b1ddc457458fecd1c6f385baa9fbda5f0c63ad |
| linux | linux_kernel | >= 0 < 6.1.37-1 | 6.1.37-1 |
| linux | linux_kernel | >= 0 < 6.3.7-1 | 6.3.7-1 |
| linux | linux_kernel | >= 0 < 6.3.7-1 | 6.3.7-1 |
| linux | linux_kernel | >= 4.8.0 < 6.1.32 | 6.1.32 |
| linux | linux_kernel | >= 6.2.0 < 6.2.15 | 6.2.15 |
| linux | linux_kernel | >= 6.3.0 < 6.3.2 | 6.3.2 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: Linux kernel: Denial of Service vulnerability in RDMA/rxe component
vendor_redhat·2025-12-24·CVSS 5.5
CVE-2023-54028 [MEDIUM] CWE-476 kernel: Linux kernel: Denial of Service vulnerability in RDMA/rxe component
kernel: Linux kernel: Denial of Service vulnerability in RDMA/rxe component
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task"
In the function rxe_create_qp(), rxe_qp_from_init() is called to
initialize qp, internally things like rxe_init_task are not setup until
rxe_qp_init_req().
If an error occurred before this point then the unwind will call
rxe_cleanup() and eventually to rxe_qp_do_cleanup()/rxe_cleanup_task()
which will oops when trying to access the uninitialized spinlock.
If rxe_init_task is not executed, rxe_cleanup_task will not be called.
A flaw was found in the Linux kernel's Remote Direct Memory Access (RDMA) subsystem, specifically within the rxe component. A local user could tr
Debian
CVE-2023-54028: linux - In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: F...
vendor_debian·2023
CVE-2023-54028 CVE-2023-54028: linux - In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: F...
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task" In the function rxe_create_qp(), rxe_qp_from_init() is called to initialize qp, internally things like rxe_init_task are not setup until rxe_qp_init_req(). If an error occurred before this point then the unwind will call rxe_cleanup() and eventually to rxe_qp_do_cleanup()/rxe_cleanup_task() which will oops when trying to access the uninitialized spinlock. If rxe_init_task is not executed, rxe_cleanup_task will not be called.
Scope: local
bookworm: resolved (fixed in 6.1.37-1)
bullseye: open
forky: resolved (fixed in 6.3.7-1)
sid: resolved (fixed in 6.3.7-1)
trixie: resolved (fixed in 6.3.7-1)
OSV
RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task"
osv·2025-12-24
CVE-2023-54028 RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task"
RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task"
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task"
In the function rxe_create_qp(), rxe_qp_from_init() is called to
initialize qp, internally things like rxe_init_task are not setup until
rxe_qp_init_req().
If an error occurred before this point then the unwind will call
rxe_cleanup() and eventually to rxe_qp_do_cleanup()/rxe_cleanup_task()
which will oops when trying to access the uninitialized spinlock.
If rxe_init_task is not executed, rxe_cleanup_task will not be called.
OSV
CVE-2023-54028: In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task" In
osv·2025-12-24
CVE-2023-54028 CVE-2023-54028: In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task" In
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task" In the function rxe_create_qp(), rxe_qp_from_init() is called to initialize qp, internally things like rxe_init_task are not setup until rxe_qp_init_req(). If an error occurred before this point then the unwind will call rxe_cleanup() and eventually to rxe_qp_do_cleanup()/rxe_cleanup_task() which will oops when trying to access the uninitialized spinlock. If rxe_init_task is not executed, rxe_cleanup_task will not be called.
GHSA
GHSA-4jmf-j564-cpmx: In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task"
ghsa_unreviewed·2025-12-24
CVE-2023-54028 GHSA-4jmf-j564-cpmx: In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task"
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task"
In the function rxe_create_qp(), rxe_qp_from_init() is called to
initialize qp, internally things like rxe_init_task are not setup until
rxe_qp_init_req().
If an error occurred before this point then the unwind will call
rxe_cleanup() and eventually to rxe_qp_do_cleanup()/rxe_cleanup_task()
which will oops when trying to access the uninitialized spinlock.
If rxe_init_task is not executed, rxe_cleanup_task will not be called.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2023-54028 kernel: Linux kernel: Denial of Service vulnerability in RDMA/rxe component
bugzilla·2025-12-24
CVE-2023-54028 [MEDIUM] CVE-2023-54028 kernel: Linux kernel: Denial of Service vulnerability in RDMA/rxe component
CVE-2023-54028 kernel: Linux kernel: Denial of Service vulnerability in RDMA/rxe component
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task"
In the function rxe_create_qp(), rxe_qp_from_init() is called to
initialize qp, internally things like rxe_init_task are not setup until
rxe_qp_init_req().
If an error occurred before this point then the unwind will call
rxe_cleanup() and eventually to rxe_qp_do_cleanup()/rxe_cleanup_task()
which will oops when trying to access the uninitialized spinlock.
If rxe_init_task is not executed, rxe_cleanup_task will not be called.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025122436-CVE-2023-54028-2399@gregkh/T
Wiz
CVE-2023-54028 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2023-54028 CVE-2023-54028 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2023-54028 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task"
In the function rxe_create_qp(), rxe_qp_from_init() is called to
initialize qp, internally things like rxe_init_task are not setup until
rxe_qp_init_req().
If an error occurred before this point then the unwind will call
rxe_cleanup() and eventually to rxe_qp_do_cleanup()/rxe_cleanup_task()
which will oops when trying to access the uninitialized spinlock.
If rxe_init_task is not executed, rxe_cleanup_task will not be called.
Source : NVD
Published December 24, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV
2025-12-24
Published