CVE-2023-53026

Summary

CVE-2023-53026 is a vulnerability affecting the Linux kernel where an iterator counter overflow occurs during the registration of a new DMA MR. When determining the aligned page size for a given sg entry, the counter responsible for tracking advancement within the sg list can be overflowed if the sg entry size is larger than 4GB and not aligned to the selected page size. This results in an infinite loop inside the iterator function, potentially leading to system instability or denial of service. The issue has been resolved by modifying the advancement condition to eliminate counter overflow. The vulnerability was detected during the registration process of a memory region and can be triggered under specific sg list and page size configurations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.