CVE-2023-53654

octeontx2-af: Add validation before accessing cgx and lmac

5.5 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: Add validation before accessing cgx and lmac

with the addition of new MAC blocks like CN10K RPM and CN10KB RPM_USX, LMACs are noncontiguous and CGX blocks are also noncontiguous. But during RVU driver initialization, the driver is assuming they are contiguous and trying to access cgx or lmac with their id which is resulting in kernel panic.

This patch fixes the issue by adding proper checks.

[ 23.219150] pc : cgx_lmac_read+0x38/0x70 [ 23.219154] lr : rvu_program_channels+0x3f0/0x498 [ 23.223852] sp : ffff000100d6fc80 [ 23.227158] x29: ffff000100d6fc80 x28: ffff00010009f880 x27: 000000000000005a [ 23.234288] x26: ffff000102586768 x25: 0000000000002500 x24: fffffffffff0f000

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.16%Up 0.1 points since Oct 8, 2025

What each source reports

NVD Score used 5.5

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: Add validation before accessing cgx and lmac

This patch fixes the issue by adding proper checks.

Record: CVE-2023-53654
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

CVE List No score

octeontx2-af: Add validation before accessing cgx and lmac

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: Add validation before accessing cgx and lmac

This patch fixes the issue by adding proper checks.

Record: CVE-2023-53654
Updated: 2026-11-02

EUVDEUVD-2025-31947 No score

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: Add validation before accessing cgx and lmac

This patch fixes the issue by adding proper checks.

Record: EUVD-2025-31947
Updated: 2026-11-02

GitHub AdvisoriesGHSA-qw28-7x42-46v9 5.5

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Add validation...

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: Add validation before accessing cgx and lmac

This patch fixes the issue by adding proper checks.

Record: GHSA-qw28-7x42-46v9
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVBELL-CVE-2023-53654 5.5

Record: BELL-CVE-2023-53654
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2023-53654 5.5

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Add validation before accessing cgx and lmac with the addition of new MAC blocks like CN10K RPM and CN10KB RPM_USX, LMACs are noncontiguous and CGX blocks are also noncontiguous. But during RVU driver initialization, the driver is assuming they are contiguous and trying to access cgx or lmac with their id which is resulting in kernel panic. This patch fixes the issue by adding proper checks. [ 23.219150] pc : cgx_lmac_read+0x38/0x70 [ 23.219154] lr : rvu_program_channels+0x3f0/0x498 [ 23.223852] sp : ffff000100d6fc80 [ 23.227158] x29: ffff000100d6fc80 x28: ffff00010009f880 x27: 000000000000005a [ 23.234288] x26: ffff000102586768 x25: 0000000000002500 x24: fffffffffff0f000

Record: DEBIAN-CVE-2023-53654
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 14 moreShow less

OSVRHSA-2025:6966 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:6966
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2023-53654 5.5

Record: UBUNTU-CVE-2023-53654
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-11

OSVCLSA-2026-1782151303 No score

kernel: Fix of 151 CVEs

spi: spi-fsl-lpspi: fix teardown order issue (UAF) {CVE-2026-31485}
Buffer overflow in drivers/xen/sys-hypervisor.c {CVE-2026-31786}
ip6_tunnel: clear skb2->cb[] in ip4ip6_err() {CVE-2026-43037}
net: bonding: fix use-after-free in bond_xmit_broadcast() {CVE-2026-31419}
bonding: do not set usable_slaves for broadcast mode {CVE-2026-31419}
net: bonding: update the slave array for broadcast mode {CVE-2026-31419}
dlm: validate length in dlm_search_rsb_tree {CVE-2026-43125}
net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448}
net: Fix an unsafe loop on the list {CVE-2024-50024}
sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy {CVE-2025-21636}
wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx {CVE-2023-54300}
wifi: nl80211: reject cooked mode if it is set along with other flags {CVE-2025-21909}
drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream {CVE-2024-49913}
xfrm: validate new SA's prefixlen using SA family when sel.family is unset {CVE-2024-50142}
serial: imx: Introduce timeout when waiting on transmitter empty {CVE-2024-40967}
iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind {CVE-2023-53501}
octeontx2-af: Add validation before accessing cgx and lmac {CVE-2023-53654}
sctp: sysctl: rto_min/max: avoid using current->nsproxy {CVE-2025-21639}
net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices {CVE-2023-52984}
sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start {CVE-2024-49944}
netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path {CVE-2026-43451}
thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR {CVE-2022-48703}
x86/mm: Fix pti_clone_pgtable() alignment assumption {CVE-2024-44965}
net: usb: asix_devices: add phy_mask for ax88772 mdio bus {CVE-2025-38725}
ALSA: hda: Do not unset preset when cleaning up codec {CVE-2023-52736}
drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func {CVE-2024-49909}
Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE {CVE-2024-53144}
fuse: Initialize beyond-EOF page contents before setting uptodate {CVE-2024-44947}
sctp: sysctl: udp_port: avoid using current->nsproxy {CVE-2025-21637}
dm stats: check for and propagate alloc_percpu failure {CVE-2023-53044}
netpoll: Fix race condition in netpoll_owner_active {CVE-2024-41005}
tracing: Fix overflow in get_free_elt() {CVE-2024-43890}
mm/slub: avoid accessing metadata when pointer is invalid in object_err() {CVE-2025-39902}
xen/netfront: stop tx queues during live migration {CVE-2022-48969}
Bluetooth: btusb: clamp SCO altsetting table indices {CVE-2026-31497}
ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free {CVE-2025-38105}
can: j1939: make j1939_sk_bind() fail if device is no longer registered {CVE-2025-39925}
nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() {CVE-2023-52508}
smb: client: Don't log plaintext credentials in cifs_set_cifscreds {CVE-2026-23303}
cifs: Fix integer overflow while processing acdirmax mount option {CVE-2025-21963}
netfilter: nfnetlink_log: account for netlink header size {CVE-2026-31416}
drm/amdgpu/vkms: fix a possible null pointer dereference {CVE-2023-52815}
drm/amd/amdgpu: Check tbo resource pointer {CVE-2024-46807}
bonding: fix null pointer deref in bond_ipsec_offload_ok {CVE-2024-44990}
wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower {CVE-2024-50237}
trace_events_hist: add check for return value of 'create_hist_field' {CVE-2023-53005}
drm/amdkfd: Add sync after creating vram bo {CVE-2023-53009}
bpf: Send signals asynchronously if !preemptible {CVE-2025-21728}
drm/client: fix null pointer dereference in drm_client_modeset_probe {CVE-2024-43894}
ext4: correct grp validation in ext4_mb_good_group {CVE-2023-53861}
RDMA/irdma: Initialize…

Record: CLSA-2026-1782151303
Updated: 2026-11-02

OSV No score

octeontx2-af: Add validation before accessing cgx and lmac

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: Add validation before accessing cgx and lmac

This patch fixes the issue by adding proper checks.

Record: CVE-2023-53654
Updated: 2026-11-02

OSVSUSE-SU-2025:21040-1 No score