CVE-2023-53731
published 2025-10-22CVE-2023-53731: In the Linux kernel, the following vulnerability has been resolved: netlink: fix potential deadlock in netlink_set_err() syzbot reported a possible deadlock in…
PriorityP421low5.5
EPSS
0.22%
12.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
netlink: fix potential deadlock in netlink_set_err()
syzbot reported a possible deadlock in netlink_set_err() [1]
A similar issue was fixed in commit 1d482e666b8e ("netlink: disable IRQs
for netlink_lock_table()") in netlink_lock_table()
This patch adds IRQ safety to netlink_set_err() and __netlink_diag_dump()
which were not covered by cited commit.
[1]
WARNING: possible irq lock inversion dependency detected
6.4.0-rc6-syzkaller-00240-g4e9f0ec38852 #0 Not tainted
syz-executor.2/23011 just changed the state of lock:
ffffffff8e1a7a58 (nl_table_lock){.+.?}-{2:2}, at: netlink_set_err+0x2e/0x3a0 net/netlink/af_netlink.c:1612
but this lock was taken by another, SOFTIRQ-safe lock in the past:
(&local->queue_stop_reason_lock){..-.}-{2:2}
and interrupts could create inverse lock ordering between them.
other info that might help us debug this:
Possible interrupt unsafe locking scenario:
CPU0 CPU1
---- ----
lock(nl_table_lock);
local_irq_disable();
lock(&local->queue_stop_reason_lock);
lock(nl_table_lock);
lock(&local->queue_stop_reason_lock);
*** DEADLOCK ***
Affected
34 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.52-1 (bookworm) | linux 6.1.52-1 (bookworm) |
| chrome_chrome | — | — | |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 1d482e666b8e74c7555dbdfbfb77205eeed3ff2d < a641240b7e071c5538dc0e7894ece833fce459dd | a641240b7e071c5538dc0e7894ece833fce459dd |
| linux | linux | >= 1d482e666b8e74c7555dbdfbfb77205eeed3ff2d < 61ffe8b1ee084e5c82a4e4bbf9e7b68e0c06e464 | 61ffe8b1ee084e5c82a4e4bbf9e7b68e0c06e464 |
| linux | linux | >= 1d482e666b8e74c7555dbdfbfb77205eeed3ff2d < eb8e27c8fa9397b4a7b181c48fa58157dbe9902e | eb8e27c8fa9397b4a7b181c48fa58157dbe9902e |
| linux | linux | >= 1d482e666b8e74c7555dbdfbfb77205eeed3ff2d < 1556ba034b95cfd4f75ea93c1a2679ae0444bba1 | 1556ba034b95cfd4f75ea93c1a2679ae0444bba1 |
| linux | linux | >= 1d482e666b8e74c7555dbdfbfb77205eeed3ff2d < 8d61f926d42045961e6b65191c09e3678d86a9cf | 8d61f926d42045961e6b65191c09e3678d86a9cf |
| linux | linux | >= 1d6d43d4805da9b3fa0f5841e8b1083c89868f35 < cde7b90e0539a3b11da377e463dfd2288a162dbf | cde7b90e0539a3b11da377e463dfd2288a162dbf |
| linux | linux | >= 21df0c2e7d195de4a3c650de9361b3037fa6c59a < 8f6652ed2ad98fe6d13b903483d9257762ab2ec6 | 8f6652ed2ad98fe6d13b903483d9257762ab2ec6 |
| linux | linux | >= 4.14.237 < 4.14.322 | 4.14.322 |
| linux | linux | >= 4.19.195 < 4.19.291 | 4.19.291 |
| linux | linux | >= 4.4.273 < 4.5 | 4.5 |
| linux | linux | >= 4.9.273 < 4.10 | 4.10 |
| linux | linux | >= 5.10.44 < 5.10.188 | 5.10.188 |
| linux | linux | >= 5.12.11 < 5.13 | 5.13 |
| linux | linux | >= 5.4.126 < 5.4.251 | 5.4.251 |
| linux | linux | >= 59fba11d649854134c75ad88c8adafa9304ac419 < 4b9adb8d4a62ff7608d4a7d4eb42036a88f30980 | 4b9adb8d4a62ff7608d4a7d4eb42036a88f30980 |
| linux | linux | >= 82b2ea5f904b3826934df4a00f3b8806272185f6 < c09e8e3f7fd432984bf5422302b093d2371dfc48 | c09e8e3f7fd432984bf5422302b093d2371dfc48 |
| linux | linux_kernel | >= 0 < 5.10.191-1 | 5.10.191-1 |
| linux | linux_kernel | >= 0 < 6.1.52-1 | 6.1.52-1 |
| linux | linux_kernel | >= 0 < 6.4.4-1 | 6.4.4-1 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Chrome
Stable Channel Update for ChromeOS / ChromeOS Flex: CVE-2023-53731
vendor_chrome·2026-01-27
CVE-2023-53731 Stable Channel Update for ChromeOS / ChromeOS Flex: CVE-2023-53731
Stable Channel Update for ChromeOS / ChromeOS Flex
CVE-2023-53731
Red Hat
kernel: Kernel: Denial of Service due to a Netlink subsystem deadlock
vendor_redhat·2025-10-22·CVSS 5.5
CVE-2023-53731 [LOW] CWE-833 kernel: Kernel: Denial of Service due to a Netlink subsystem deadlock
kernel: Kernel: Denial of Service due to a Netlink subsystem deadlock
In the Linux kernel, the following vulnerability has been resolved:
netlink: fix potential deadlock in netlink_set_err()
syzbot reported a possible deadlock in netlink_set_err() [1]
A similar issue was fixed in commit 1d482e666b8e ("netlink: disable IRQs
for netlink_lock_table()") in netlink_lock_table()
This patch adds IRQ safety to netlink_set_err() and __netlink_diag_dump()
which were not covered by cited commit.
[1]
WARNING: possible irq lock inversion dependency detected
6.4.0-rc6-syzkaller-00240-g4e9f0ec38852 #0 Not tainted
syz-executor.2/23011 just changed the state of lock:
ffffffff8e1a7a58 (nl_table_lock){.+.?}-{2:2}, at: netlink_set_err+0x2e/0x3a0 net/netlink/af_netlink.c:1612
but this lock was taken by anothe
Debian
CVE-2023-53731: linux - In the Linux kernel, the following vulnerability has been resolved: netlink: fi...
vendor_debian·2023
CVE-2023-53731 CVE-2023-53731: linux - In the Linux kernel, the following vulnerability has been resolved: netlink: fi...
In the Linux kernel, the following vulnerability has been resolved: netlink: fix potential deadlock in netlink_set_err() syzbot reported a possible deadlock in netlink_set_err() [1] A similar issue was fixed in commit 1d482e666b8e ("netlink: disable IRQs for netlink_lock_table()") in netlink_lock_table() This patch adds IRQ safety to netlink_set_err() and __netlink_diag_dump() which were not covered by cited commit. [1] WARNING: possible irq lock inversion dependency detected 6.4.0-rc6-syzkaller-00240-g4e9f0ec38852 #0 Not tainted syz-executor.2/23011 just changed the state of lock: ffffffff8e1a7a58 (nl_table_lock){.+.?}-{2:2}, at: netlink_set_err+0x2e/0x3a0 net/netlink/af_netlink.c:1612 but this lock was taken by another, SOFTIRQ-safe lock in the past: (&local->queue_stop_reason_lock){..-.
VulDB
Linux Kernel up to 5.15.120 netlink_set_err deadlock (Nessus ID 319313 / WID-SEC-2025-2394)
vuldb·2026-06-08
CVE-2023-53731 [CRITICAL] Linux Kernel up to 5.15.120 netlink_set_err deadlock (Nessus ID 319313 / WID-SEC-2025-2394)
A vulnerability marked as critical has been reported in Linux Kernel up to 4.14.321/4.19.290/5.4.250/5.10.187/5.15.120. This affects the function netlink_set_err. The manipulation leads to deadlock.
This vulnerability is referenced as CVE-2023-53731. The attack needs to be initiated within the local network. No exploit is available.
It is suggested to upgrade the affected component.
OSV
netlink: fix potential deadlock in netlink_set_err()
osv·2025-10-22
CVE-2023-53731 netlink: fix potential deadlock in netlink_set_err()
netlink: fix potential deadlock in netlink_set_err()
In the Linux kernel, the following vulnerability has been resolved:
netlink: fix potential deadlock in netlink_set_err()
syzbot reported a possible deadlock in netlink_set_err() [1]
A similar issue was fixed in commit 1d482e666b8e ("netlink: disable IRQs
for netlink_lock_table()") in netlink_lock_table()
This patch adds IRQ safety to netlink_set_err() and __netlink_diag_dump()
which were not covered by cited commit.
[1]
WARNING: possible irq lock inversion dependency detected
6.4.0-rc6-syzkaller-00240-g4e9f0ec38852 #0 Not tainted
syz-executor.2/23011 just changed the state of lock:
ffffffff8e1a7a58 (nl_table_lock){.+.?}-{2:2}, at: netlink_set_err+0x2e/0x3a0 net/netlink/af_netlink.c:1612
but this lock was taken by another, SOFTIRQ
GHSA
GHSA-cj8f-58h8-h475: In the Linux kernel, the following vulnerability has been resolved:
netlink: fix potential deadlock in netlink_set_err()
syzbot reported a possible
ghsa_unreviewed·2025-10-22
CVE-2023-53731 GHSA-cj8f-58h8-h475: In the Linux kernel, the following vulnerability has been resolved:
netlink: fix potential deadlock in netlink_set_err()
syzbot reported a possible
In the Linux kernel, the following vulnerability has been resolved:
netlink: fix potential deadlock in netlink_set_err()
syzbot reported a possible deadlock in netlink_set_err() [1]
A similar issue was fixed in commit 1d482e666b8e ("netlink: disable IRQs
for netlink_lock_table()") in netlink_lock_table()
This patch adds IRQ safety to netlink_set_err() and __netlink_diag_dump()
which were not covered by cited commit.
[1]
WARNING: possible irq lock inversion dependency detected
6.4.0-rc6-syzkaller-00240-g4e9f0ec38852 #0 Not tainted
syz-executor.2/23011 just changed the state of lock:
ffffffff8e1a7a58 (nl_table_lock){.+.?}-{2:2}, at: netlink_set_err+0x2e/0x3a0 net/netlink/af_netlink.c:1612
but this lock was taken by another, SOFTIRQ-safe lock in the past:
(&local->queue_stop_reason_loc
OSV
CVE-2023-53731: In the Linux kernel, the following vulnerability has been resolved: netlink: fix potential deadlock in netlink_set_err() syzbot reported a possible de
osv·2025-10-22
CVE-2023-53731 CVE-2023-53731: In the Linux kernel, the following vulnerability has been resolved: netlink: fix potential deadlock in netlink_set_err() syzbot reported a possible de
In the Linux kernel, the following vulnerability has been resolved: netlink: fix potential deadlock in netlink_set_err() syzbot reported a possible deadlock in netlink_set_err() [1] A similar issue was fixed in commit 1d482e666b8e ("netlink: disable IRQs for netlink_lock_table()") in netlink_lock_table() This patch adds IRQ safety to netlink_set_err() and __netlink_diag_dump() which were not covered by cited commit. [1] WARNING: possible irq lock inversion dependency detected 6.4.0-rc6-syzkaller-00240-g4e9f0ec38852 #0 Not tainted syz-executor.2/23011 just changed the state of lock: ffffffff8e1a7a58 (nl_table_lock){.+.?}-{2:2}, at: netlink_set_err+0x2e/0x3a0 net/netlink/af_netlink.c:1612 but this lock was taken by another, SOFTIRQ-safe lock in the past: (&local->queue_stop_reason_lock){..-.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/1556ba034b95cfd4f75ea93c1a2679ae0444bba1https://git.kernel.org/stable/c/4b9adb8d4a62ff7608d4a7d4eb42036a88f30980https://git.kernel.org/stable/c/61ffe8b1ee084e5c82a4e4bbf9e7b68e0c06e464https://git.kernel.org/stable/c/8d61f926d42045961e6b65191c09e3678d86a9cfhttps://git.kernel.org/stable/c/8f6652ed2ad98fe6d13b903483d9257762ab2ec6https://git.kernel.org/stable/c/a641240b7e071c5538dc0e7894ece833fce459ddhttps://git.kernel.org/stable/c/c09e8e3f7fd432984bf5422302b093d2371dfc48https://git.kernel.org/stable/c/cde7b90e0539a3b11da377e463dfd2288a162dbfhttps://git.kernel.org/stable/c/eb8e27c8fa9397b4a7b181c48fa58157dbe9902e
2025-10-22
Published