CVE-2023-53393

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device

Currently, when mlx5_ib_get_hw_stats() is used for device (port_num = 0),

there is a special handling in order to use the correct counters, but,

port_num is being passed down the stack without any change. Also, some

functions assume that port_num >=1. As a result, the following oops can

occur.

BUG: unable to handle page fault for address: ffff89510294f1a8

#PF: supervisor write access in kernel mode

#PF: error_code(0x0002) - not-present page

PGD 0 P4D 0

Oops: 0002 [#1] SMP

CPU: 8 PID: 1382 Comm: devlink Tainted: G W 6.1.0-rc4_for_upstream_base_2022_11_10_16_12 #1

Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014

RIP: 0010:_raw_spin_lock+0xc/0x20

Call Trace:

<TASK>

mlx5_ib_get_native_port_mdev+0x73/0xe0 [mlx5_ib]

do_get_hw_stats.constprop.0+0x109/0x160 [mlx5_ib]

mlx5_ib_get

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References