CVE-2023-54237: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-54237 is a vulnerability in the Linux kernel's SMC (Shared Memory Communications) subsystem, specifically in the net/smc component. It involves a potential kernel panic caused by an unprotected call to smc_llc_srv_add_link(), which can lead to a NULL pointer dereference when ib_alloc_mr is called with a NULL device pointer. The vulnerability was published on December 30, 2025, and affects the Linux kernel. No CVSS score has been officially assigned at this time (Feedly).

The root cause is a race condition or missing protection around the smc_llc_srv_add_link() function in the Linux kernel's SMC networking subsystem (CWE-476: NULL Pointer Dereference). When this function is called without adequate synchronization, it can invoke smc_ib_get_memory_region() → smcr_buf_map_link() → __smc_buf_create() → ib_alloc_mr() with a NULL InfiniBand device pointer (RDI=0), triggering a page fault and kernel panic. The panic trace shows the crash originates in a kworker thread context, indicating the issue is triggered asynchronously during SMC link group operations. Fixes are available in the stable kernel tree via commits 0c764cc271d3, e40b801b3603, and f2f46de98c11 (Feedly, Kernel Git).

Successful exploitation of this vulnerability results in a kernel panic (system crash), causing a complete loss of availability for the affected Linux system. The crash is triggered in kernel space via a NULL pointer dereference in the InfiniBand memory registration path, meaning there is no direct confidentiality or integrity impact — the primary consequence is a denial of service. Systems using SMC over RDMA (SMC-R) with InfiniBand or RoCE networking are most at risk (Feedly).

Apply the upstream Linux kernel patches that fix the unprotected smc_llc_srv_add_link() call. The fixes are available in the stable kernel tree via commits 0c764cc271d3aa6528ae1b3394babf34ac01f775, e40b801b3603a8f90b46acbacdea3505c27f01c0, and f2f46de98c11d41ac8d22765f47ba54ce5480a5b. As a workaround, administrators who do not require SMC-R functionality can disable the SMC module (modprobe -r smc) to eliminate exposure. Monitor vendor distributions (Red Hat, SUSE, Ubuntu, etc.) for backported kernel updates (Kernel Git, Red Hat CVE).