Bug 2401510 (CVE-2023-53539) - CVE-2023-53539 kernel: RDMA/rxe: Fix incomplete state save in rxe_requester
Summary: CVE-2023-53539 kernel: RDMA/rxe: Fix incomplete state save in rxe_requester
Keywords:
Status: NEW
Alias: CVE-2023-53539
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-10-04 16:04 UTC by OSIDB Bzimport
Modified: 2026-03-25 00:35 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2025:22800 0 None None None 2025-12-08 02:50:55 UTC
Red Hat Product Errata RHSA-2025:22801 0 None None None 2025-12-08 03:07:26 UTC
Red Hat Product Errata RHSA-2026:0534 0 None None None 2026-01-14 00:09:25 UTC
Red Hat Product Errata RHSA-2026:0535 0 None None None 2026-01-14 00:28:45 UTC
Red Hat Product Errata RHSA-2026:1445 0 None None None 2026-01-28 00:27:30 UTC
Red Hat Product Errata RHSA-2026:1494 0 None None None 2026-01-28 15:08:07 UTC
Red Hat Product Errata RHSA-2026:1495 0 None None None 2026-01-28 15:04:22 UTC
Red Hat Product Errata RHSA-2026:2664 0 None None None 2026-02-12 15:12:29 UTC
Red Hat Product Errata RHSA-2026:3360 0 None None None 2026-02-25 15:16:38 UTC
Red Hat Product Errata RHSA-2026:5691 0 None None None 2026-03-25 00:35:06 UTC

Description OSIDB Bzimport 2025-10-04 16:04:46 UTC 
In the Linux kernel, the following vulnerability has been resolved:

RDMA/rxe: Fix incomplete state save in rxe_requester

If a send packet is dropped by the IP layer in rxe_requester()
the call to rxe_xmit_packet() can fail with err == -EAGAIN.
To recover, the state of the wqe is restored to the state before
the packet was sent so it can be resent. However, the routines
that save and restore the state miss a significnt part of the
variable state in the wqe, the dma struct which is used to process
through the sge table. And, the state is not saved before the packet
is built which modifies the dma struct.

Under heavy stress testing with many QPs on a fast node sending
large messages to a slow node dropped packets are observed and
the resent packets are corrupted because the dma struct was not
restored. This patch fixes this behavior and allows the test cases
to succeed.
Comment 1 Alexander B 2025-10-06 14:42:34 UTC 
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025100443-CVE-2023-53539-4411@gregkh/T
Comment 6 errata-xmlrpc 2025-12-08 02:50:54 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2025:22800 https://access.redhat.com/errata/RHSA-2025:22800
Comment 7 errata-xmlrpc 2025-12-08 03:07:25 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2025:22801 https://access.redhat.com/errata/RHSA-2025:22801
Comment 8 errata-xmlrpc 2026-01-14 00:09:24 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:0534 https://access.redhat.com/errata/RHSA-2026:0534
Comment 9 errata-xmlrpc 2026-01-14 00:28:44 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:0535 https://access.redhat.com/errata/RHSA-2026:0535
Comment 10 errata-xmlrpc 2026-01-28 00:27:29 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Via RHSA-2026:1445 https://access.redhat.com/errata/RHSA-2026:1445
Comment 11 errata-xmlrpc 2026-01-28 15:04:21 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

Via RHSA-2026:1495 https://access.redhat.com/errata/RHSA-2026:1495
Comment 12 errata-xmlrpc 2026-01-28 15:08:06 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

Via RHSA-2026:1494 https://access.redhat.com/errata/RHSA-2026:1494
Comment 13 errata-xmlrpc 2026-02-12 15:12:28 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.2 Advanced Update Support

Via RHSA-2026:2664 https://access.redhat.com/errata/RHSA-2026:2664
Comment 14 errata-xmlrpc 2026-02-25 15:16:37 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

Via RHSA-2026:3360 https://access.redhat.com/errata/RHSA-2026:3360
Comment 16 errata-xmlrpc 2026-03-25 00:35:05 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.6 Telecommunications Update Service

Via RHSA-2026:5691 https://access.redhat.com/errata/RHSA-2026:5691
Note You need to log in before you can comment on or make changes to this bug.