CVE-2023-53731 — Deadlock in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.1%
top 80.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 22
Latest updateJan 27
Description
In the Linux kernel, the following vulnerability has been resolved:
netlink: fix potential deadlock in netlink_set_err()
syzbot reported a possible deadlock in netlink_set_err() [1]
A similar issue was fixed in commit 1d482e666b8e ("netlink: disable IRQs
for netlink_lock_table()") in netlink_lock_table()
This patch adds IRQ safety to netlink_set_err() and __netlink_diag_dump()
which were not covered by cited commit.
[1]
WARNING: possible irq lock inversion dependency detected
6.4.0-rc6-syz…
Affected Packages5 packages
▶CVEListV5linux/linux82b2ea5f904b3826934df4a00f3b8806272185f6 — c09e8e3f7fd432984bf5422302b093d2371dfc48+12
🔴Vulnerability Details
3GHSA▶
GHSA-cj8f-58h8-h475: In the Linux kernel, the following vulnerability has been resolved:
netlink: fix potential deadlock in netlink_set_err()
syzbot reported a possible↗2025-10-22
OSV▶
CVE-2023-53731: In the Linux kernel, the following vulnerability has been resolved: netlink: fix potential deadlock in netlink_set_err() syzbot reported a possible de↗2025-10-22