CVE-2023-53335 RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish()
A null pointer dereference in the Linux kernel's cxgb4 RDMA driver allows attackers to cause a system crash via crafted network traffic.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-53335?
CVE-2023-53335 is a high-severity vulnerability in Linux kernel, published on 17 Sep 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish()
If get_ep_from_tid() fails to lookup non-NULL value for ep, ep is dereferenced later regardless of whether it is empty. This patch adds a simple sanity check to fix the issue.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Weakness: CWE-476
Which versions are affected by CVE-2023-53335?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2023-53335?
Apply the vendor's patch.
Is CVE-2023-53335 being exploited?
There is no known exploitation of CVE-2023-53335 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2023-53335, DEBIAN-CVE-2023-53335, GHSA-9pwf-89r7-36h6, ROOT-OS-DEBIAN-11-CVE-2023-53335, UBUNTU-CVE-2023-53335.