What’s Vulnerable › Vulnerabilities

CVE-2023-53201: RDMA/bnxt_re: wraparound mbox producer index

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-15 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: wraparound mbox producer index Driver is not handling the wraparound of the mbox producer index correctly. Currently the wraparound happens once u32 max is reached. Bit 31 of the producer index register is special and should be set only once for the first command. Because the producer index overflow setting bit31 after a long time, FW goes to initialization sequence and this causes FW hang. Fix is to wraparound the mbox producer index once it reaches u16 max.

Affected products

• Linux kernel: from 4.11 before 5.10.188; from 5.11 before 5.15.121; from 5.16 before 6.1.39; from 6.2 before 6.3.13; from 6.4 before 6.4.4 — fixed in 5.10.188, 5.15.121, 6.1.39, 6.3.13, 6.4.4

How to fix

Upgrade to a fixed version: Linux kernel 5.10.188, 5.15.121, 6.1.39, 6.3.13. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0af91306e17ef3d18e5f100aa58aa787869118af
• https://git.kernel.org/stable/c/50d77c3739b2b15e9e1f1c9cbe50037d294800f8
• https://git.kernel.org/stable/c/79226176cdd1b65a1e6a90e0e1a2b490f0a9df33
• https://git.kernel.org/stable/c/7bfa0303fbc265c94cfbd17505c55b99848aa4e3
• https://git.kernel.org/stable/c/9341501e2f7af29f5b5562c2840a7fde40eb7de4
• https://git.kernel.org/stable/c/c9be352be9bb15e6b83e40abc4df7f4776b435ba

Get alerted when CVE-2023-53201 or the next vulnerability affects your stack