CVE-2023-53201 Details
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: wraparound mbox producer index Driver is not handling the wraparound of the mbox producer index correctly. Currently the wraparound happens once u32 max is reached. Bit 31 of the producer index register is special and should be set only once for the first command. Because the producer index overflow setting bit31 after a long time, FW goes to initialization sequence and this causes FW hang. Fix is to wraparound the mbox producer index once it reaches u16 max.
A vulnerability in the Linux kernel's RDMA/bnxt_re driver relates to improper handling of the mailbox (mbox) producer index wraparound. The issue arises when the index reaches its maximum value, causing a wraparound that is not correctly managed. Specifically, bit 31 of the producer index register, which is meant to be set only once for the initial command, becomes problematic. After a prolonged period, the producer index overflow can inadvertently trigger a firmware (FW) initialization sequence, leading to a hang. The vulnerability affects several versions of the Linux kernel.
The vulnerability has been addressed by modifying the driver to correctly wrap around the mailbox producer index once it reaches its maximum value. Users can apply the latest patches available in the Linux kernel stable tree to mitigate this issue.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0af91306e17ef3d18e5f100aa58aa787869118af | kernel.org | Patch |
| https://git.kernel.org/stable/c/50d77c3739b2b15e9e1f1c9cbe50037d294800f8 | kernel.org | Patch |
| https://git.kernel.org/stable/c/79226176cdd1b65a1e6a90e0e1a2b490f0a9df33 | kernel.org | Patch |
| https://git.kernel.org/stable/c/7bfa0303fbc265c94cfbd17505c55b99848aa4e3 | kernel.org | Patch |
| https://git.kernel.org/stable/c/9341501e2f7af29f5b5562c2840a7fde40eb7de4 | kernel.org | Patch |
| https://git.kernel.org/stable/c/c9be352be9bb15e6b83e40abc4df7f4776b435ba | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 4.11, < 5.10.188 >= 5.11, < 5.15.121 >= 5.16, < 6.1.39 >= 6.2, < 6.3.13 >= 6.4, < 6.4.4 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Dec 4, 2025 | Initial Analysis | [email protected] |
| Sep 15, 2025 | New CVE Received | kernel.org |