CVE-2023-53148
published 2025-09-15CVE-2023-53148: In the Linux kernel, the following vulnerability has been resolved: igb: Fix igb_down hung on surprise removal In a setup where a Thunderbolt hub connects to…
PriorityP338high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.15%
5.2th percentile
In the Linux kernel, the following vulnerability has been resolved:
igb: Fix igb_down hung on surprise removal
In a setup where a Thunderbolt hub connects to Ethernet and a display
through USB Type-C, users may experience a hung task timeout when they
remove the cable between the PC and the Thunderbolt hub.
This is because the igb_down function is called multiple times when
the Thunderbolt hub is unplugged. For example, the igb_io_error_detected
triggers the first call, and the igb_remove triggers the second call.
The second call to igb_down will block at napi_synchronize.
Here's the call trace:
__schedule+0x3b0/0xddb
? __mod_timer+0x164/0x5d3
schedule+0x44/0xa8
schedule_timeout+0xb2/0x2a4
? run_local_timers+0x4e/0x4e
msleep+0x31/0x38
igb_down+0x12c/0x22a [igb 6615058754948bfde0bf01429257eb59f13030d4]
__igb_close+0x6f/0x9c [igb 6615058754948bfde0bf01429257eb59f13030d4]
igb_close+0x23/0x2b [igb 6615058754948bfde0bf01429257eb59f13030d4]
__dev_close_many+0x95/0xec
dev_close_many+0x6e/0x103
unregister_netdevice_many+0x105/0x5b1
unregister_netdevice_queue+0xc2/0x10d
unregister_netdev+0x1c/0x23
igb_remove+0xa7/0x11c [igb 6615058754948bfde0bf01429257eb59f13030d4]
pci_device_remove+0x3f/0x9c
device_release_driver_internal+0xfe/0x1b4
pci_stop_bus_device+0x5b/0x7f
pci_stop_bus_device+0x30/0x7f
pci_stop_bus_device+0x30/0x7f
pci_stop_and_remove_bus_device+0x12/0x19
pciehp_unconfigure_device+0x76/0xe9
pciehp_disable_slot+0x6e/0x131
pciehp_handle_presence_or_link_change+0x7a/0x3f7
pciehp_ist+0xbe/0x194
irq_thread_fn+0x22/0x4d
? irq_thread+0x1fd/0x1fd
irq_thread+0x17b/0x1fd
? irq_forced_thread_fn+0x5f/0x5f
kthread+0x142/0x153
? __irq_get_irqchip_state+0x46/0x46
? kthread_associate_blkcg+0x71/0x71
ret_from_fork+0x1f/0x30
In this case, igb_io_error_detected detaches the network interface
and requests a PCIE slot reset, however, the PCIE reset callback is
not being invoked and thus the Ethernet connection breaks down.
As the PCIE error in this case is a non-fatal one, requesting a
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.52-1 (bookworm) | linux 6.1.52-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 9d5c824399dea881779d78a6c147288bf2dccb6b < c2312e1d12b1c3ee4100c173131b102e2aed4d04 | c2312e1d12b1c3ee4100c173131b102e2aed4d04 |
| linux | linux | >= 9d5c824399dea881779d78a6c147288bf2dccb6b < 124e39a734cb90658b8f0dc110847bbfc6e33792 | 124e39a734cb90658b8f0dc110847bbfc6e33792 |
| linux | linux | >= 9d5c824399dea881779d78a6c147288bf2dccb6b < c9f56f3c7bc908caa772112d3ae71cdd5d18c257 | c9f56f3c7bc908caa772112d3ae71cdd5d18c257 |
| linux | linux | >= 9d5c824399dea881779d78a6c147288bf2dccb6b < 994c2ceb70ea99264ccc6f09e6703ca267dad63c | 994c2ceb70ea99264ccc6f09e6703ca267dad63c |
| linux | linux | >= 9d5c824399dea881779d78a6c147288bf2dccb6b < fa92c463eba75dcedbd8d689ffdcb83293aaa0c3 | fa92c463eba75dcedbd8d689ffdcb83293aaa0c3 |
| linux | linux | >= 9d5c824399dea881779d78a6c147288bf2dccb6b < 39695e87d86f0e7d897fba1d2559f825aa20caeb | 39695e87d86f0e7d897fba1d2559f825aa20caeb |
| linux | linux | >= 9d5c824399dea881779d78a6c147288bf2dccb6b < 41f63b72a01c0e0ac59ab83fd2d921fcce0f602d | 41f63b72a01c0e0ac59ab83fd2d921fcce0f602d |
| linux | linux | >= 9d5c824399dea881779d78a6c147288bf2dccb6b < 004d25060c78fc31f66da0fa439c544dda1ac9d5 | 004d25060c78fc31f66da0fa439c544dda1ac9d5 |
| linux | linux_kernel | < 4.14.322 | 4.14.322 |
| linux | linux_kernel | >= 0 < 5.10.191-1 | 5.10.191-1 |
| linux | linux_kernel | >= 0 < 6.1.52-1 | 6.1.52-1 |
| linux | linux_kernel | >= 0 < 6.4.11-1 | 6.4.11-1 |
| linux | linux_kernel | >= 0 < 6.4.11-1 | 6.4.11-1 |
| linux | linux_kernel | >= 4.15 < 4.19.291 | 4.19.291 |
| linux | linux_kernel | >= 4.20 < 5.4.251 | 5.4.251 |
| linux | linux_kernel | >= 5.11 < 5.15.150 | 5.15.150 |
| linux | linux_kernel | >= 5.16 < 6.1.42 | 6.1.42 |
| linux | linux_kernel | >= 5.5 < 5.10.188 | 5.10.188 |
| linux | linux_kernel | >= 6.2 < 6.4.7 | 6.4.7 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-mxw3-r93h-fcv9: In the Linux kernel, the following vulnerability has been resolved:
igb: Fix igb_down hung on surprise removal
In a setup where a Thunderbolt hub co
ghsa_unreviewed·2025-09-15
CVE-2023-53148 [HIGH] CWE-415 GHSA-mxw3-r93h-fcv9: In the Linux kernel, the following vulnerability has been resolved:
igb: Fix igb_down hung on surprise removal
In a setup where a Thunderbolt hub co
In the Linux kernel, the following vulnerability has been resolved:
igb: Fix igb_down hung on surprise removal
In a setup where a Thunderbolt hub connects to Ethernet and a display
through USB Type-C, users may experience a hung task timeout when they
remove the cable between the PC and the Thunderbolt hub.
This is because the igb_down function is called multiple times when
the Thunderbolt hub is unplugged. For example, the igb_io_error_detected
triggers the first call, and the igb_remove triggers the second call.
The second call to igb_down will block at napi_synchronize.
Here's the call trace:
__schedule+0x3b0/0xddb
? __mod_timer+0x164/0x5d3
schedule+0x44/0xa8
schedule_timeout+0xb2/0x2a4
? run_local_timers+0x4e/0x4e
msleep+0x31/0x38
igb_down+0x12c/0x22a [igb 6615058754948bfde0bf0142925
OSV
CVE-2023-53148: In the Linux kernel, the following vulnerability has been resolved: igb: Fix igb_down hung on surprise removal In a setup where a Thunderbolt hub conn
osv·2025-09-15·CVSS 7.8
CVE-2023-53148 [HIGH] CVE-2023-53148: In the Linux kernel, the following vulnerability has been resolved: igb: Fix igb_down hung on surprise removal In a setup where a Thunderbolt hub conn
In the Linux kernel, the following vulnerability has been resolved: igb: Fix igb_down hung on surprise removal In a setup where a Thunderbolt hub connects to Ethernet and a display through USB Type-C, users may experience a hung task timeout when they remove the cable between the PC and the Thunderbolt hub. This is because the igb_down function is called multiple times when the Thunderbolt hub is unplugged. For example, the igb_io_error_detected triggers the first call, and the igb_remove triggers the second call. The second call to igb_down will block at napi_synchronize. Here's the call trace: __schedule+0x3b0/0xddb ? __mod_timer+0x164/0x5d3 schedule+0x44/0xa8 schedule_timeout+0xb2/0x2a4 ? run_local_timers+0x4e/0x4e msleep+0x31/0x38 igb_down+0x12c/0x22a [igb 6615058754948bfde0bf01429257e
Red Hat
kernel: igb: Fix igb_down hung on surprise removal
vendor_redhat·2025-09-15·CVSS 7.8
CVE-2023-53148 [HIGH] CWE-1341 kernel: igb: Fix igb_down hung on surprise removal
kernel: igb: Fix igb_down hung on surprise removal
In the Linux kernel, the following vulnerability has been resolved:
igb: Fix igb_down hung on surprise removal
In a setup where a Thunderbolt hub connects to Ethernet and a display
through USB Type-C, users may experience a hung task timeout when they
remove the cable between the PC and the Thunderbolt hub.
This is because the igb_down function is called multiple times when
the Thunderbolt hub is unplugged. For example, the igb_io_error_detected
triggers the first call, and the igb_remove triggers the second call.
The second call to igb_down will block at napi_synchronize.
Here's the call trace:
__schedule+0x3b0/0xddb
? __mod_timer+0x164/0x5d3
schedule+0x44/0xa8
schedule_timeout+0xb2/0x2a4
? run_local_timers+0x4e/0x4e
msleep+0x31/0x38
igb
Debian
CVE-2023-53148: linux - In the Linux kernel, the following vulnerability has been resolved: igb: Fix ig...
vendor_debian·2023·CVSS 7.8
CVE-2023-53148 [HIGH] CVE-2023-53148: linux - In the Linux kernel, the following vulnerability has been resolved: igb: Fix ig...
In the Linux kernel, the following vulnerability has been resolved: igb: Fix igb_down hung on surprise removal In a setup where a Thunderbolt hub connects to Ethernet and a display through USB Type-C, users may experience a hung task timeout when they remove the cable between the PC and the Thunderbolt hub. This is because the igb_down function is called multiple times when the Thunderbolt hub is unplugged. For example, the igb_io_error_detected triggers the first call, and the igb_remove triggers the second call. The second call to igb_down will block at napi_synchronize. Here's the call trace: __schedule+0x3b0/0xddb ? __mod_timer+0x164/0x5d3 schedule+0x44/0xa8 schedule_timeout+0xb2/0x2a4 ? run_local_timers+0x4e/0x4e msleep+0x31/0x38 igb_down+0x12c/0x22a [igb 6615058754948bfde0bf01429257e
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/004d25060c78fc31f66da0fa439c544dda1ac9d5https://git.kernel.org/stable/c/124e39a734cb90658b8f0dc110847bbfc6e33792https://git.kernel.org/stable/c/39695e87d86f0e7d897fba1d2559f825aa20caebhttps://git.kernel.org/stable/c/41f63b72a01c0e0ac59ab83fd2d921fcce0f602dhttps://git.kernel.org/stable/c/994c2ceb70ea99264ccc6f09e6703ca267dad63chttps://git.kernel.org/stable/c/c2312e1d12b1c3ee4100c173131b102e2aed4d04https://git.kernel.org/stable/c/c9f56f3c7bc908caa772112d3ae71cdd5d18c257https://git.kernel.org/stable/c/fa92c463eba75dcedbd8d689ffdcb83293aaa0c3
2025-09-15
Published