CVE-2023-54168: RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()
In the Linux kernel, the following vulnerability has been resolved:
RDMA/mlx4: Prevent shift wrapping in setusersqsize()
The ucmd->logsqbbcount variable is controlled by the user so this shift can wrap. Fix it by using checkshloverflow() in the same way that it was done in commit 515f60004ed9 ("RDMA/hns: Prevent undefined behavior in hnsrocesetusersqsize()").
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-54168?
CVE-2023-54168 has a risk rating of 23, indicating a high level of severity.
How do I fix CVE-2023-54168?
To fix CVE-2023-54168, update the Linux kernel to a version that incorporates the patch addressing the shift wrapping issue in set_user_sq_size.
What systems are affected by CVE-2023-54168?
CVE-2023-54168 affects systems running the vulnerable versions of the Linux kernel with RDMA/mlx4 support.
What type of vulnerability is CVE-2023-54168?
CVE-2023-54168 is a shifting vulnerability that can lead to unexpected behavior due to user-controlled variables.
When was CVE-2023-54168 published?
CVE-2023-54168 was published on December 30, 2025.