CVE-2023-54168
High
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() The ucmd->log_sq_bb_count variable is controlled by the user so this shift can wrap. Fix it by using check_shl_overflow() in the same way that it was done in commit 515f60004ed9 ("RDMA/hns: Prevent undefined behavior in hns_roce_set_user_sq_size()").
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedDec 30, 2025
First seenDec 30, 2025
How to fix
Update
- Linux Linux3d5ae269c4bd392ec1edbfb3bd031b8f42d7feff, 8feca625900777e02a449e53fe4121339934c38a, 9ad3221c86cc9c6305594b742d4a72dfbd4ea579, 9911be2155720221a4f1f722b22bd0e2388d8bcf, 3ce0df3493277b9df275cb8455d9c677ae701230, 196a6df08b08699ace4ce70e1efcdd9081b6565f, a183905869e692b6b7805b7472235585eff8e429, d50b3c73f1ac20dabc53dc6e9d64ce9c79a331eb or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 839041329fd3410e07d614f81e75bb43367d8f89 ≤ v < 3d5ae269c4bd392ec1edbfb3bd031b8f42d7feff, 839041329fd3410e07d614f81e75bb43367d8f89 ≤ v < 8feca625900777e02a449e53fe4121339934c38a, 839041329fd3410e07d614f81e75bb43367d8f89 ≤ v < 9ad3221c86cc9c6305594b742d4a72dfbd4ea579, 839041329fd3410e07d614f81e75bb43367d8f89 ≤ v < 9911be2155720221a4f1f722b22bd0e2388d8bcf, 839041329fd3410e07d614f81e75bb43367d8f89 ≤ v < 3ce0df3493277b9df275cb8455d9c677ae701230, 839041329fd3410e07d614f81e75bb43367d8f89 ≤ v < 196a6df08b08699ace4ce70e1efcdd9081b6565f, 839041329fd3410e07d614f81e75bb43367d8f89 ≤ v < a183905869e692b6b7805b7472235585eff8e429, 839041329fd3410e07d614f81e75bb43367d8f89 ≤ v < d50b3c73f1ac20dabc53dc6e9d64ce9c79a331eb, 2.6.24 | 3d5ae269c4bd392ec1edbfb3bd031b8f42d7feff, 8feca625900777e02a449e53fe4121339934c38a, 9ad3221c86cc9c6305594b742d4a72dfbd4ea579, 9911be2155720221a4f1f722b22bd0e2388d8bcf, 3ce0df3493277b9df275cb8455d9c677ae701230, 196a6df08b08699ace4ce70e1efcdd9081b6565f, a183905869e692b6b7805b7472235585eff8e429, d50b3c73f1ac20dabc53dc6e9d64ce9c79a331eb |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.