CVE-2023-54028

RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task"

N/A
Published: December 24, 2025 at 10:55 AM UTC
Updated: June 17, 2026 at 06:46 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task" In the function rxe_create_qp(), rxe_qp_from_init() is called to initialize qp, internally things like rxe_init_task are not setup until rxe_qp_init_req(). If an error occurred before this point then the unwind will call rxe_cleanup() and eventually to rxe_qp_do_cleanup()/rxe_cleanup_task() which will oops when trying to access the uninitialized spinlock. If rxe_init_task is not executed, rxe_cleanup_task will not be called.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.8 ≤ v < 6.1.324.8 ≤ v < 6.2.154.8 ≤ v < 6.3.24.8 ≤ v < 6.44.88700e3e7c4857d28ebaa824509934556da0b3e76
Vendor states this is fixed in 0d938264fcfe4927e54f0e519da05af1d5d720b4 (fixed)
Vendor states this is fixed in 3236221bb8e4de8e3d0c8385f634064fb26b8e38 (fixed)
Vendor states this is fixed in b2b1ddc457458fecd1c6f385baa9fbda5f0c63ad (fixed)
Vendor states this is fixed in c8473cd5b301279a41dc75e5afb26b3d5223b6c7 (fixed)
Vendor states this is fixed in 4.8 (unaffected)
Vendor states this is fixed in 6.1.32 (unaffected)
Vendor states this is fixed in 6.2.15 (unaffected)
Vendor states this is fixed in 6.3.2 (unaffected)
Vendor states this is fixed in 6.4 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card