CVE-2023-54302: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-54302 is a data race vulnerability in the Linux kernel's RDMA/irdma driver affecting CQP (Control Queue Pair) completion statistics. The flaw occurs because completion statistics are read without locking in irdma_wait_event and irdma_check_cqp_progress, while they can be concurrently updated in the completion thread irdma_sc_ccq_get_cqe_info on another CPU. The vulnerability was published on December 30, 2025, and affects the Linux kernel's irdma module. It carries an EPSS score of 0.018% (very low), and no CVSS score has been publicly assigned at this time (Feedly, CVE.org).

The root cause is a classic concurrent read/write data race (CWE-362: Concurrent Execution Using Shared Resource with Improper Synchronization) in the Linux kernel's irdma RDMA driver. The completion statistics counter at memory address 0xffff8a3250b108e0 is written by task 9544 on CPU 4 via irdma_sc_ccq_get_cqe_info while simultaneously being read by task 9838 on CPU 2 via irdma_handle_cqp_op, as detected by KCSAN (Kernel Concurrency Sanitizer). The fix converts the completion statistics variable to an atomic type, ensuring coherent updates and preventing potential load/store tearing that could result from compiler optimizations. The patches are available in the stable kernel tree at multiple commits (Feedly, Kernel Patch 1).

Exploitation of this data race can lead to inconsistent or corrupted CQP completion statistics within the irdma RDMA driver, potentially causing incorrect driver behavior, logic errors in CQP operation handling, or system instability. In the worst case, the race condition could result in a kernel panic or denial of service on systems using Intel RDMA hardware managed by the irdma driver. The impact is limited to systems with the irdma kernel module loaded and active RDMA workloads, and does not directly expose user data or allow privilege escalation (Feedly).

The fix has been merged into the Linux kernel stable tree via multiple commits (e.g., 4e1a5842, 2623ca92, bf0f9f65, f2c30378) that convert the CQP completion statistics variable to an atomic type. Administrators should update to a patched kernel version that includes these stable backports. As a workaround, systems that do not require RDMA functionality can unload or blacklist the irdma kernel module to eliminate exposure. Red Hat has also tracked this issue for affected RHEL versions (Vulners/RedHat, Kernel Patch 1).