{"id":"CVE-2023-2176","details":"A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to crash the system or escalation of privilege.","modified":"2026-03-14T11:58:09.643565Z","published":"2023-04-20T21:15:08.937Z","related":["ALSA-2024:0897","SUSE-SU-2023:2140-1","SUSE-SU-2023:2141-1","SUSE-SU-2023:2146-1","SUSE-SU-2023:2147-1","SUSE-SU-2023:2148-1","SUSE-SU-2023:2231-1","SUSE-SU-2023:2501-1","SUSE-SU-2023:2507-1","SUSE-SU-2023:2534-1","SUSE-SU-2023:2537-1","SUSE-SU-2023:2538-1","SUSE-SU-2023:2646-1","SUSE-SU-2023:2809-1","SUSE-SU-2023:2871-1","SUSE-SU-2023:3566-1","SUSE-SU-2023:3576-1","SUSE-SU-2023:3582-1","SUSE-SU-2023:3592-1","SUSE-SU-2023:3594-1","SUSE-SU-2023:3595-1","SUSE-SU-2023:3596-1","SUSE-SU-2023:3603-1","SUSE-SU-2023:3607-1","SUSE-SU-2023:3612-1","SUSE-SU-2023:3623-1","SUSE-SU-2023:3627-1","SUSE-SU-2023:3629-1","SUSE-SU-2023:3630-1","SUSE-SU-2023:3644-1","SUSE-SU-2023:3647-1","SUSE-SU-2023:3668-1","SUSE-SU-2023:3671-1","SUSE-SU-2024:2010-1","SUSE-SU-2024:2183-1","SUSE-SU-2024:2185-1","SUSE-SU-2024:3249-1","SUSE-SU-2024:3251-1","SUSE-SU-2024:3252-1","SUSE-SU-2024:3499-1","SUSE-SU-2025:02846-1","SUSE-SU-2025:02848-1"],"references":[{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20230609-0005/"},{"type":"FIX","url":"https://www.spinics.net/lists/linux-rdma/msg114749.html"}],"affected":[{"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-2176.json","unresolved_ranges":[{"events":[{"introduced":"6.0"},{"fixed":"6.1.81"}]},{"events":[{"introduced":"6.2"},{"fixed":"6.3"}]}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}