CVE-2023-53382

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

net/smc: Reset connection when trying to use SMCRv2 fails.

We found a crash when using SMCRv2 with 2 Mellanox ConnectX-4. It

can be reproduced by:

- smc_run nginx

- smc_run wrk -t 32 -c 500 -d 30 http://<ip>:<port>

BUG: kernel NULL pointer dereference, address: 0000000000000014

#PF: supervisor read access in kernel mode

#PF: error_code(0x0000) - not-present page

PGD 8000000108713067 P4D 8000000108713067 PUD 151127067 PMD 0

Oops: 0000 [#1] PREEMPT SMP PTI

CPU: 4 PID: 2441 Comm: kworker/4:249 Kdump: loaded Tainted: G W E 6.4.0-rc1+ #42

Workqueue: smc_hs_wq smc_listen_work [smc]

RIP: 0010:smc_clc_send_confirm_accept+0x284/0x580 [smc]

RSP: 0018:ffffb8294b2d7c78 EFLAGS: 00010a06

RAX: ffff8f1873238880 RBX: ffffb8294b2d7dc8 RCX: 0000000000000000

RDX: 00000000000000b4 RSI: 0000000000000001 RDI: 0000000000b40c00

RBP: ffffb8294b2d7db8 R08: ffff8f1815c5860c R09: 0000000000000000

R10: 000000000000040

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References