# CVE-2023-54234: linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: mpi3mr: Fix missing mrioc->evtack_cmds ini...

CVE-2023-54234 is fixed in 63 products on 1 platform, first by RHSA-2023:6583, released November 7, 2023. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2023-54234
- Priority: High
- CVSS: 7.8 (high)
- EPSS: 0.0015
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Nov 7, 2023

## Description

In the Linux kernel, the following vulnerability has been resolved:  scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization  Commit c1af985d27da ("scsi: mpi3mr: Add Event acknowledgment logic") introduced an array mrioc->evtack_cmds but initialization of the array elements was missed. They are just zero cleared. The function mpi3mr_complete_evt_ack() refers host_tag field of the elements. Due to the zero value of the host_tag field, the function calls clear_bit() for mrico->evtack_cmds_bitmap with wrong bit index. This results in memory access to invalid address and "BUG: KASAN: use-after-free". This BUG was observed at eHBA-9600 firmware update to version 8.3.1.0. To fix it, add the missing initialization of mrioc->evtack_cmds.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | bpftool RHEL 8 | 0:4.18.0-513.5.1.el8_9 | [RHSA-2023:7077](https://patchblox.com/security/data/fix/linux/rhsa-2023-7077.md) | Nov 14, 2023 |
| Linux | bpftool RHEL 9 | 0:7.2.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel RHEL 8 | 0:4.18.0-513.5.1.el8_9 | [RHSA-2023:7077](https://patchblox.com/security/data/fix/linux/rhsa-2023-7077.md) | Nov 14, 2023 |
| Linux | kernel RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-64k RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-64k-core RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-64k-debug RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-64k-debug-core RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-64k-debug-devel RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-64k-debug-devel-matched RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-64k-debug-modules RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-64k-debug-modules-core RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-64k-debug-modules-extra RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-64k-devel RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-64k-devel-matched RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-64k-modules RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-64k-modules-core RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-64k-modules-extra RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-abi-stablelists RHEL 8 | 0:4.18.0-513.5.1.el8_9 | [RHSA-2023:7077](https://patchblox.com/security/data/fix/linux/rhsa-2023-7077.md) | Nov 14, 2023 |
| Linux | kernel-abi-stablelists RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-core RHEL 8 | 0:4.18.0-513.5.1.el8_9 | [RHSA-2023:7077](https://patchblox.com/security/data/fix/linux/rhsa-2023-7077.md) | Nov 14, 2023 |
| Linux | kernel-core RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-debug RHEL 8 | 0:4.18.0-513.5.1.el8_9 | [RHSA-2023:7077](https://patchblox.com/security/data/fix/linux/rhsa-2023-7077.md) | Nov 14, 2023 |
| Linux | kernel-debug RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-debug-core RHEL 8 | 0:4.18.0-513.5.1.el8_9 | [RHSA-2023:7077](https://patchblox.com/security/data/fix/linux/rhsa-2023-7077.md) | Nov 14, 2023 |
| Linux | kernel-debug-core RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-debug-devel RHEL 8 | 0:4.18.0-513.5.1.el8_9 | [RHSA-2023:7077](https://patchblox.com/security/data/fix/linux/rhsa-2023-7077.md) | Nov 14, 2023 |
| Linux | kernel-debug-devel RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-debug-devel-matched RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-debug-modules RHEL 8 | 0:4.18.0-513.5.1.el8_9 | [RHSA-2023:7077](https://patchblox.com/security/data/fix/linux/rhsa-2023-7077.md) | Nov 14, 2023 |
| Linux | kernel-debug-modules RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-debug-modules-core RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-debug-modules-extra RHEL 8 | 0:4.18.0-513.5.1.el8_9 | [RHSA-2023:7077](https://patchblox.com/security/data/fix/linux/rhsa-2023-7077.md) | Nov 14, 2023 |
| Linux | kernel-debug-modules-extra RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-debug-uki-virt RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-devel RHEL 8 | 0:4.18.0-513.5.1.el8_9 | [RHSA-2023:7077](https://patchblox.com/security/data/fix/linux/rhsa-2023-7077.md) | Nov 14, 2023 |
| Linux | kernel-devel RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-devel-matched RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-doc RHEL 8 | 0:4.18.0-513.5.1.el8_9 | [RHSA-2023:7077](https://patchblox.com/security/data/fix/linux/rhsa-2023-7077.md) | Nov 14, 2023 |
| Linux | kernel-doc RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-modules RHEL 8 | 0:4.18.0-513.5.1.el8_9 | [RHSA-2023:7077](https://patchblox.com/security/data/fix/linux/rhsa-2023-7077.md) | Nov 14, 2023 |
| Linux | kernel-modules RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-modules-core RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-modules-extra RHEL 8 | 0:4.18.0-513.5.1.el8_9 | [RHSA-2023:7077](https://patchblox.com/security/data/fix/linux/rhsa-2023-7077.md) | Nov 14, 2023 |
| Linux | kernel-modules-extra RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-rt RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-rt-core RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-rt-debug RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-rt-debug-core RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-rt-debug-devel RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-rt-debug-kvm RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-rt-debug-modules RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-rt-debug-modules-core RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-rt-debug-modules-extra RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-rt-devel RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-rt-kvm RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-rt-modules RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-rt-modules-core RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-rt-modules-extra RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-tools RHEL 8 | 0:4.18.0-513.5.1.el8_9 | [RHSA-2023:7077](https://patchblox.com/security/data/fix/linux/rhsa-2023-7077.md) | Nov 14, 2023 |
| Linux | kernel-tools RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-tools-libs RHEL 8 | 0:4.18.0-513.5.1.el8_9 | [RHSA-2023:7077](https://patchblox.com/security/data/fix/linux/rhsa-2023-7077.md) | Nov 14, 2023 |
| Linux | kernel-tools-libs RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-tools-libs-devel RHEL 8 | 0:4.18.0-513.5.1.el8_9 | [RHSA-2023:7077](https://patchblox.com/security/data/fix/linux/rhsa-2023-7077.md) | Nov 14, 2023 |
| Linux | kernel-tools-libs-devel RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-uki-virt RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-zfcpdump RHEL 8 | 0:4.18.0-513.5.1.el8_9 | [RHSA-2023:7077](https://patchblox.com/security/data/fix/linux/rhsa-2023-7077.md) | Nov 14, 2023 |
| Linux | kernel-zfcpdump RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-zfcpdump-core RHEL 8 | 0:4.18.0-513.5.1.el8_9 | [RHSA-2023:7077](https://patchblox.com/security/data/fix/linux/rhsa-2023-7077.md) | Nov 14, 2023 |
| Linux | kernel-zfcpdump-core RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-zfcpdump-devel RHEL 8 | 0:4.18.0-513.5.1.el8_9 | [RHSA-2023:7077](https://patchblox.com/security/data/fix/linux/rhsa-2023-7077.md) | Nov 14, 2023 |
| Linux | kernel-zfcpdump-devel RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-zfcpdump-devel-matched RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-zfcpdump-modules RHEL 8 | 0:4.18.0-513.5.1.el8_9 | [RHSA-2023:7077](https://patchblox.com/security/data/fix/linux/rhsa-2023-7077.md) | Nov 14, 2023 |
| Linux | kernel-zfcpdump-modules RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-zfcpdump-modules-core RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | kernel-zfcpdump-modules-extra RHEL 8 | 0:4.18.0-513.5.1.el8_9 | [RHSA-2023:7077](https://patchblox.com/security/data/fix/linux/rhsa-2023-7077.md) | Nov 14, 2023 |
| Linux | kernel-zfcpdump-modules-extra RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | libperf RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | linux Debian 12.15 (bookworm) | 6.1.20-1 | [DEBIAN-CVE-2023-54234](https://patchblox.com/security/data/fix/linux/debian-cve-2023-54234.md) | Dec 30, 2025 |
| Linux | linux Debian 13.5 (trixie) | 6.1.20-1 | [DEBIAN-CVE-2023-54234](https://patchblox.com/security/data/fix/linux/debian-cve-2023-54234.md) | Dec 30, 2025 |
| Linux | linux Debian 14 | 6.1.20-1 | [DEBIAN-CVE-2023-54234](https://patchblox.com/security/data/fix/linux/debian-cve-2023-54234.md) | Dec 30, 2025 |
| Linux | perf RHEL 8 | 0:4.18.0-513.5.1.el8_9 | [RHSA-2023:7077](https://patchblox.com/security/data/fix/linux/rhsa-2023-7077.md) | Nov 14, 2023 |
| Linux | perf RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | python3-perf RHEL 8 | 0:4.18.0-513.5.1.el8_9 | [RHSA-2023:7077](https://patchblox.com/security/data/fix/linux/rhsa-2023-7077.md) | Nov 14, 2023 |
| Linux | python3-perf RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | rtla RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |
| Linux | rv RHEL 9 | 0:5.14.0-362.8.1.el9_3 | [RHSA-2023:6583](https://patchblox.com/security/data/fix/linux/rhsa-2023-6583.md) | Nov 7, 2023 |

---

Data as of 2026-11-09T13:31:49Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.