In the Linux kernel, the following vulnerability has been resolved:

RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()

The ucmd->log_sq_bb_count variable is controlled by the user so this
shift can wrap. Fix it by using check_shl_overflow() in the same way
that it was done in commit 515f60004ed9 ("RDMA/hns: Prevent undefined
behavior in hns_roce_set_user_sq_size()").

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00035.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
839041329fd3410e07d614f81e75bb43367d8f89 affected < 3d5ae269c4bd392ec1edbfb3bd031b8f42d7feff
839041329fd3410e07d614f81e75bb43367d8f89 affected < 8feca625900777e02a449e53fe4121339934c38a
839041329fd3410e07d614f81e75bb43367d8f89 affected < 9ad3221c86cc9c6305594b742d4a72dfbd4ea579
839041329fd3410e07d614f81e75bb43367d8f89 affected < 9911be2155720221a4f1f722b22bd0e2388d8bcf
839041329fd3410e07d614f81e75bb43367d8f89 affected < 3ce0df3493277b9df275cb8455d9c677ae701230
839041329fd3410e07d614f81e75bb43367d8f89 affected < 196a6df08b08699ace4ce70e1efcdd9081b6565f
839041329fd3410e07d614f81e75bb43367d8f89 affected < a183905869e692b6b7805b7472235585eff8e429
839041329fd3410e07d614f81e75bb43367d8f89 affected < d50b3c73f1ac20dabc53dc6e9d64ce9c79a331eb
Linux Linux affected
Version Status Constraints
2.6.24 affected —
0 unaffected < 2.6.24
4.19.283 unaffected ≤ 4.19.*
5.4.243 unaffected ≤ 5.4.*
5.10.180 unaffected ≤ 5.10.*
5.15.111 unaffected ≤ 5.15.*
6.1.28 unaffected ≤ 6.1.*
6.2.15 unaffected ≤ 6.2.*
6.3.2 unaffected ≤ 6.3.*
6.4 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/196a6df08b08699ace4ce70e1efcdd9081b6565f cve-icon cve-icon
https://git.kernel.org/stable/c/3ce0df3493277b9df275cb8455d9c677ae701230 cve-icon cve-icon
https://git.kernel.org/stable/c/3d5ae269c4bd392ec1edbfb3bd031b8f42d7feff cve-icon cve-icon
https://git.kernel.org/stable/c/8feca625900777e02a449e53fe4121339934c38a cve-icon cve-icon
https://git.kernel.org/stable/c/9911be2155720221a4f1f722b22bd0e2388d8bcf cve-icon cve-icon
https://git.kernel.org/stable/c/9ad3221c86cc9c6305594b742d4a72dfbd4ea579 cve-icon cve-icon
https://git.kernel.org/stable/c/a183905869e692b6b7805b7472235585eff8e429 cve-icon cve-icon
https://git.kernel.org/stable/c/d50b3c73f1ac20dabc53dc6e9d64ce9c79a331eb cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025123020-CVE-2023-54168-eba2@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-54168 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-54168 cve-icon
History

Wed, 31 Dec 2025 12:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Important

Tue, 30 Dec 2025 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() The ucmd->log_sq_bb_count variable is controlled by the user so this shift can wrap. Fix it by using check_shl_overflow() in the same way that it was done in commit 515f60004ed9 ("RDMA/hns: Prevent undefined behavior in hns_roce_set_user_sq_size()").
Title RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-12-30T12:08:43.394Z

Reserved: 2025-12-30T12:06:44.495Z

Link: CVE-2023-54168

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-12-30T13:16:04.610

Modified: 2025-12-31T20:43:05.160

Link: CVE-2023-54168

cve-icon Redhat

Severity : Important

Publid Date: 2025-12-30T00:00:00Z

Links: CVE-2023-54168 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.