CVE-2023-53394

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-09-18 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix crash on regular rq reactivation When the regular rq is reactivated after the XSK socket is closed it could be reading stale cqes which eventually corrupts the rq. This leads to no more traffic being received on the regular rq and a crash on the next close or deactivation of the rq. Kal Cuttler Conely reported this issue as a crash on the release path when the xdpsock sample program is stopped (killed) and restarted in sequence while traffic is running. This patch flushes all cqes when during the rq flush. The cqe flushing is done in the reset state of the rq. mlx5e_rq_to_ready code is moved into the flush function to allow for this.

Affected Software (9)

VendorProductVersion
Linux Linux 082a9edf12fef88400172e7d1b131d65a3ed492e < ecf583abb07da326d5058dc6ba79dae58aa800d3
Linux Linux 082a9edf12fef88400172e7d1b131d65a3ed492e < 02a84eb2af6bea7871cd34264fb27f141f005fd9
Linux Linux 082a9edf12fef88400172e7d1b131d65a3ed492e < 39646d9bcd1a65d2396328026626859a1dab59d7
Linux Linux 6.1
linux linux_kernel 6.1 – 6.4.10
linux linux_kernel 6.5
linux linux_kernel 6.5
linux linux_kernel 6.5
linux linux_kernel 6.5

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.15%
Raw Score 0.001540
Percentile 4.5%
Date 2026-11-02

EPSS Trend

2026-11-02
0.00154
2026-11-01
0.00154
2026-10-31
0.00154
2026-10-30
0.00137
2026-10-29
0.00137

Intelligence Sources

mitre ref →
nvd ref →