High 7.8Published Dec 30, 2025

CVE-2023-54168RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()

Updated under an hour ago (Oct 27, 2026, 5:10 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() The ucmd->log_sq_bb_count variable is controlled by the user so this shift can wrap. Fix it by using check_shl_overflow() in the same way that it was done in commit 515f60004ed9 ("RDMA/hns: Prevent undefined behavior in hns_roce_set_user_sq_size()").

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: Oct 15, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	839041329fd3410e07d614f81e75bb43367d8f89 builds before 3d5ae269c4bd392ec1edbfb3bd031b8f42d7feff; 839041329fd3410e07d614f81e75bb43367d8f89 builds before 8feca625900777e02a449e53fe4121339934c38a; 839041329fd3410e07d614f81e75bb43367d8f89 builds before 9ad3221c86cc9c6305594b742d4a72dfbd4ea579; 839041329fd3410e07d614f81e75bb43367d8f89 builds before 9911be2155720221a4f1f722b22bd0e2388d8bcf; 839041329fd3410e07d614f81e75bb43367d8f89 builds before 3ce0df3493277b9df275cb8455d9c677ae701230; 839041329fd3410e07d614f81e75bb43367d8f89 builds before 196a6df08b08699ace4ce70e1efcdd9081b6565f; from 839041329fd3410e07d614f81e75bb43367d8f89 before a183905869e692b6b7805b7472235585eff8e429; from 839041329fd3410e07d614f81e75bb43367d8f89 before d50b3c73f1ac20dabc53dc6e9d64ce9c79a331eb	CNA record

References

References

https://git.kernel.org/stable/c/3d5ae269c4bd392ec1edbfb3bd031b8f42d7feff
https://git.kernel.org/stable/c/8feca625900777e02a449e53fe4121339934c38a
https://git.kernel.org/stable/c/9ad3221c86cc9c6305594b742d4a72dfbd4ea579
https://git.kernel.org/stable/c/9911be2155720221a4f1f722b22bd0e2388d8bcf
https://git.kernel.org/stable/c/3ce0df3493277b9df275cb8455d9c677ae701230
https://git.kernel.org/stable/c/196a6df08b08699ace4ce70e1efcdd9081b6565f
https://git.kernel.org/stable/c/a183905869e692b6b7805b7472235585eff8e429
https://git.kernel.org/stable/c/d50b3c73f1ac20dabc53dc6e9d64ce9c79a331eb

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.