CVE-2023-53488

IB/hfi1: Fix possible panic during hotplug remove

MEDIUM

5.5

CVSS Score

Published: October 1, 2025 at 11:45 AM UTC

Updated: June 17, 2026 at 06:45 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix possible panic during hotplug remove During hotplug remove it is possible that the update counters work might be pending, and may run after memory has been freed. Cancel the update counters work before freeing memory.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

4.15 ≤ v < 4.19.2924.20 ≤ v < 5.4.2544.3 ≤ v < 4.14.3234.3 ≤ v < 4.19.2924.3 ≤ v < 5.10.1914.3 ≤ v < 5.15.1274.3 ≤ v < 5.4.2544.3 ≤ v < 6.1.464.3 ≤ v < 6.4.114.3 ≤ v < 6.55.11 ≤ v < 5.15.1275.16 ≤ v < 6.1.465.5 ≤ v < 5.10.1916.2 ≤ v < 6.4.114.3 6.5 rc1 6.5 rc2 6.5 rc3 6.5 rc4 6.5 rc57724105686e718ac476a6ad3304fea2fbcfcffde

Vendor states this is fixed in 33c677d1e087e437c7dcaad8d73402cf6add282e (fixed)

Vendor states this is fixed in 4fdfaef71fced490835145631a795497646f4555 (fixed)

Vendor states this is fixed in 5e72f33ddfdb69cb21c1b59d31bbd3498d31b14a (fixed)

Vendor states this is fixed in 918c1e6843b7e81d0e5cf7994f41f28dc34c98b0 (fixed)

Vendor states this is fixed in ac6640f4193d0f5b44269a7f08372909f9a18e5c (fixed)

Vendor states this is fixed in bfd727ad8411995218f336ead9f2becfde7f3a89 (fixed)

Vendor states this is fixed in c2145b18740c7e697748e4005ce93a5c683c86a8 (fixed)

Vendor states this is fixed in d32a5e9b825d40c08a43dfbcba007159fed41a5d (fixed)

Vendor states this is fixed in 4.14.323 (unaffected)

Vendor states this is fixed in 4.19.292 (unaffected)

Vendor states this is fixed in 4.3 (unaffected)

Vendor states this is fixed in 5.10.191 (unaffected)