CVE-2023-53201

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/bnxt_re: wraparound mbox producer index

Driver is not handling the wraparound of the mbox producer index correctly. Currently the wraparound happens once u32 max is reached.

Bit 31 of the producer index register is special and should be set only once for the first command. Because the producer index overflow setting bit31 after a long time, FW goes to initialization sequence and this causes FW hang.

Fix is to wraparound the mbox producer index once it reaches u16 max.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 1ac5a404797523cedaf424a3aaa3cf8f9548dff8, < 9341501e2f7af29f5b5562c2840a7fde40eb7de4; >= 1ac5a404797523cedaf424a3aaa3cf8f9548dff8, < 79226176cdd1b65a1e6a90e0e1a2b490f0a9df33; >= 1ac5a404797523cedaf424a3aaa3cf8f9548dff8, < c9be352be9bb15e6b83e40abc4df7f4776b435ba; >= 1ac5a404797523cedaf424a3aaa3cf8f9548dff8, < 7bfa0303fbc265c94cfbd17505c55b99848aa4e3; >= 1ac5a404797523cedaf424a3aaa3cf8f9548dff8, < 50d77c3739b2b15e9e1f1c9cbe50037d294800f8; >= 1ac5a404797523cedaf424a3aaa3cf8f9548dff8, < 0af91306e17ef3d18e5f100aa58aa787869118af
LinuxLinux4.11

References

Timeline

Published
Sep 15, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-532025.5In the Linux kernel, the following vulnerability has been resolved: PM: domains: fix memory leak with using debugfs_lookup() When calling CVE-2023-532035.5In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: rely on mt76_connac2_mac_tx_rate_val In order to fCVE-2023-532044.7In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix data-races around user->unix_inflight. user->unix_inflighCVE-2023-532057.8In the Linux kernel, the following vulnerability has been resolved: KVM: s390/diag: fix racy access of physical cpu number in diag 9c handlCVE-2023-532065.5In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus_core) Fix NULL pointer dereference Pass i2c_client to _pCVE-2023-532075.5In the Linux kernel, the following vulnerability has been resolved: ublk: fail to recover device if queue setup is interrupted In ublk_ctrCVE-2023-532085.5In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Load L1's TSC multiplier based on L1 state, not L2 state WhCVE-2023-532095.5In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: Fix possible NULL dereference In a call to mac80CVE-2023-53215.5Missing Authorization in GitHub repository hamza417/inure prior to build94.CVE-2023-532105.5In the Linux kernel, the following vulnerability has been resolved: md/raid5-cache: fix null-ptr-deref for r5l_flush_stripe_to_raid() r5l_CVE-2023-532115.5In the Linux kernel, the following vulnerability has been resolved: driver core: location: Free struct acpi_pld_info *pld before return falCVE-2023-532137.1In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() Fix a
CVE-2023-53201: Medium severity, CVSS 5.5 | Vulnix