CVE-2023-53286

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/mlx5: Return the firmware result upon destroying QP/RQ

Previously when destroying a QP/RQ, the result of the firmware

destruction function was ignored and upper layers weren't informed

about the failure.

Which in turn could lead to various problems since when upper layer

isn't aware of the failure it continues its operation thinking that the

related QP/RQ was successfully destroyed while it actually wasn't,

which could lead to the below kernel WARN.

Currently, we return the correct firmware destruction status to upper

layers which in case of the RQ would be mlx5_ib_destroy_wq() which

was already capable of handling RQ destruction failure or in case of

a QP to destroy_qp_common(), which now would actually warn upon qp

destruction failure.

WARNING: CPU: 3 PID: 995 at drivers/infiniband/core/rdma_core.c:940 uverbs_destroy_ufile_hw+0xcb/0xe0 [ib_uverbs]

Modules linked in: xt_conntrack xt_MASQUERADE nf_conntrack_ne

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References