CVE-2023-53654

octeontx2-af: Add validation before accessing cgx and lmac

published October 7, 2025

CVSS
—
EPSS
0%
Percentile
4.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: Add validation before accessing cgx and lmac

with the addition of new MAC blocks like CN10K RPM and CN10KB

RPM_USX, LMACs are noncontiguous and CGX blocks are also

noncontiguous. But during RVU driver initialization, the driver

is assuming they are contiguous and trying to access

cgx or lmac with their id which is resulting in kernel panic.

This patch fixes the issue by adding proper checks.

[ 23.219150] pc : cgx_lmac_read+0x38/0x70

[ 23.219154] lr : rvu_program_channels+0x3f0/0x498

[ 23.223852] sp : ffff000100d6fc80

[ 23.227158] x29: ffff000100d6fc80 x28: ffff00010009f880 x27:

000000000000005a

[ 23.234288] x26: ffff000102586768 x25: 0000000000002500 x24:

fffffffffff0f000

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00155 · 4.3th percentile
Published
2025-10-07T15:19Z
EPSS history
Timeline
  • 07 OCT 15:19Z
    octeontx2-af: Add validation before accessing cgx and lmac
    cvelistv5