In the Linux kernel, the following vulnerability has been resolved:
octeontx2-af: Add validation before accessing cgx and lmac
with the addition of new MAC blocks like CN10K RPM and CN10KB
RPM_USX, LMACs are noncontiguous and CGX blocks are also
noncontiguous. But during RVU driver initialization, the driver
is assuming they are contiguous and trying to access
cgx or lmac with their id which is resulting in kernel panic.
This patch fixes the issue by adding proper checks.
[ 23.219150] pc : cgx_lmac_read+0x38/0x70
[ 23.219154] lr : rvu_program_channels+0x3f0/0x498
[ 23.223852] sp : ffff000100d6fc80
[ 23.227158] x29: ffff000100d6fc80 x28: ffff00010009f880 x27:
000000000000005a
[ 23.234288] x26: ffff000102586768 x25: 0000000000002500 x24:
fffffffffff0f000
References
Configurations
Configuration 1 (hide)
|
History
03 Feb 2026, 22:24
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
| First Time |
Linux linux Kernel
Linux |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| References | () https://git.kernel.org/stable/c/79ebb53772c95d3a6ae51b3c65f9985fdd430df6 - Patch | |
| References | () https://git.kernel.org/stable/c/a5485a943193e55c79150382e6461e8ea759e96e - Patch | |
| References | () https://git.kernel.org/stable/c/b04872e15f3df62cb2fd530950f769626e1ef489 - Patch | |
| References | () https://git.kernel.org/stable/c/e425e2ba933618ee5ec8e4f3eb341efeb6c9ddef - Patch |
Information
Published : 2025-10-07 16:15
Updated : 2026-02-03 22:24
NVD link : CVE-2023-53654
Mitre link : CVE-2023-53654
CVE.ORG link : CVE-2023-53654
JSON object : View
Products Affected
linux
- linux_kernel
CWE