The vulnerability of the mlx5cmd_errtrace() function in the drivers/net/ethernet/mellanox/mlx5/core/cmd.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

🗓️ 20 Feb 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Out-of-bounds write in mlx5cmd_errtrace in Mellanox mlx5 driver may expose or corrupt data.

Reporter	Title	Published	Views	Family All 45
AstraLinux	Astra Linux – Vulnerability in Linux 5.10	19 Jun 202611:10	–	astralinux
CNNVD	Linux kernel 安全漏洞	17 Sep 202500:00	–	cnnvd
CVE	CVE-2023-53340	17 Sep 202514:56	–	cve
Cvelist	CVE-2023-53340 net/mlx5: Collect command failures data only for known commands	17 Sep 202514:56	–	cvelist
Debian CVE	CVE-2023-53340	17 Sep 202514:56	–	debiancve
EUVD	EUVD-2023-59986	3 Oct 202520:07	–	euvd
NVD	CVE-2023-53340	17 Sep 202515:15	–	nvd
OSV	BELL-CVE-2023-53340	18 Sep 202506:04	–	osv
OSV	CVE-2023-53340 net/mlx5: Collect command failures data only for known commands	17 Sep 202514:56	–	osv
OSV	DEBIAN-CVE-2023-53340	17 Sep 202515:15	–	osv

Vulners

Node

red_hat red_hat_enterprise_linuxMatch8

OR

red_hat red_hat_enterprise_linuxMatch9

Source	Link
cve	www.cve.org/CVERecord
git	www.git.kernel.org/stable/c/411e4d6caa7f7169192b8dacc8421ac4fd64a354
git	www.git.kernel.org/stable/c/d8b6f175235d7327b4e1b13216859e89496dfbd5
git	www.git.kernel.org/linus/2a0a935fb64ee8af253b9c6133bb6702fb152ac2
kernel	www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.31
kernel	www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.5
access	www.access.redhat.com/security/cve/cve-2023-53340
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-53340
web	www.web.nvd.nist.gov/view/vuln/detail

20 Feb 2026 00:00Current

6Medium risk

Vulners AI Score6

CVSS 26

CVSS 37

EPSS0.00197

mlx5cmd_errtrace mellanox driver out of bounds data exposure buffer vulnerability