Bug 2395343 (CVE-2023-53201) - CVE-2023-53201 kernel: RDMA/bnxt_re: wraparound mbox producer index
Summary: CVE-2023-53201 kernel: RDMA/bnxt_re: wraparound mbox producer index
Keywords:
Status: NEW
Alias: CVE-2023-53201
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-09-15 15:08 UTC by OSIDB Bzimport
Modified: 2025-09-18 16:45 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2025-09-15 15:08:38 UTC
In the Linux kernel, the following vulnerability has been resolved:

RDMA/bnxt_re: wraparound mbox producer index

Driver is not handling the wraparound of the mbox producer index correctly.
Currently the wraparound happens once u32 max is reached.

Bit 31 of the producer index register is special and should be set
only once for the first command. Because the producer index overflow
setting bit31 after a long time, FW goes to initialization sequence
and this causes FW hang.

Fix is to wraparound the mbox producer index once it reaches u16 max.


Note You need to log in before you can comment on or make changes to this bug.