CVE-2023-54028
RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task"
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task" In the function rxe_create_qp(), rxe_qp_from_init() is called to initialize qp, internally things like rxe_init_task are not setup until rxe_qp_init_req(). If an error occurred before this point then the unwind will call rxe_cleanup() and eventually to rxe_qp_do_cleanup()/rxe_cleanup_task() which will oops when trying to access the uninitialized spinlock. If rxe_init_task is not executed, rxe_cleanup_task will not be called.
Timeline
ID reserved
By Linux
Published
- 5 months later
· 5 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Deferred.
- EPSS (exploitation in 30 days)
- 0.19% · top 91% of all CVEs (7 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected 8700e3e7c4857d28ebaa824509934556da0b3e76 – < 3236221bb8e4de8e3d0c8385f634064fb26b8e38
- affected 8700e3e7c4857d28ebaa824509934556da0b3e76 – < c8473cd5b301279a41dc75e5afb26b3d5223b6c7
- affected 8700e3e7c4857d28ebaa824509934556da0b3e76 – < 0d938264fcfe4927e54f0e519da05af1d5d720b4
- affected 8700e3e7c4857d28ebaa824509934556da0b3e76 – < b2b1ddc457458fecd1c6f385baa9fbda5f0c63ad
- affected 4.8
- unaffected < 4.8
- unaffected 6.1.32 – ≤ 6.1.*
- unaffected 6.2.15 – ≤ 6.2.*
- unaffected 6.3.2 – ≤ 6.3.*
- unaffected 6.4 – ≤ *
References (4)
- https://git.kernel.org/stable/c/3236221bb8e4de8e3d0c8385f634064fb26b8e38 (opens in a new tab)
- https://git.kernel.org/stable/c/c8473cd5b301279a41dc75e5afb26b3d5223b6c7 (opens in a new tab)
- https://git.kernel.org/stable/c/0d938264fcfe4927e54f0e519da05af1d5d720b4 (opens in a new tab)
- https://git.kernel.org/stable/c/b2b1ddc457458fecd1c6f385baa9fbda5f0c63ad (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-54028)Record last updated .