CVE-2023-53394 net/mlx5e: xsk: Fix crash on regular rq reactivation
A flaw in the Linux kernel mlx5e driver causes a crash when reactivating a regular receive queue after closing an XSK socket, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-53394?
CVE-2023-53394 is a high-severity vulnerability in Linux kernel, published on 18 Sep 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: xsk: Fix crash on regular rq reactivation
When the regular rq is reactivated after the XSK socket is closed it could be reading stale cqes which eventually corrupts the rq. This leads to no more traffic being received on the regular rq and a crash on the next close or deactivation of the rq.
Kal Cuttler Conely reported this issue as a crash on the release path when the xdpsock sample program is stopped (killed) and restarted in sequence while traffic is running.
This patch flushes all cqes when during the rq flush. The cqe flushing is done in the reset state of the rq. mlx5e_rq_to_ready code is moved into the flush function to allow for this.
Which versions are affected by CVE-2023-53394?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2023-53394?
Apply the vendor's patch.
Is CVE-2023-53394 being exploited?
There is no known exploitation of CVE-2023-53394 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2023-53394, DEBIAN-CVE-2023-53394, GHSA-x6jv-3w92-hqpc, ROOT-OS-DEBIAN-12-CVE-2023-53394, UBUNTU-CVE-2023-53394.