CVE-2023-54236
published 2025-12-30CVE-2023-54236: In the Linux kernel, the following vulnerability has been resolved: net/net_failover: fix txq exceeding warning The failover txq is inited as 16 queues. when a…
PriorityP422medium5.8
EPSS
0.19%
8.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
net/net_failover: fix txq exceeding warning
The failover txq is inited as 16 queues.
when a packet is transmitted from the failover device firstly,
the failover device will select the queue which is returned from
the primary device if the primary device is UP and running.
If the primary device txq is bigger than the default 16,
it can lead to the following warning:
eth0 selects TX queue 18, but real number of TX queues is 16
The warning backtrace is:
[ 32.146376] CPU: 18 PID: 9134 Comm: chronyd Tainted: G E 6.2.8-1.el7.centos.x86_64 #1
[ 32.147175] Hardware name: Red Hat KVM, BIOS 1.10.2-3.el7_4.1 04/01/2014
[ 32.147730] Call Trace:
[ 32.147971]
[ 32.148183] dump_stack_lvl+0x48/0x70
[ 32.148514] dump_stack+0x10/0x20
[ 32.148820] netdev_core_pick_tx+0xb1/0xe0
[ 32.149180] __dev_queue_xmit+0x529/0xcf0
[ 32.149533] ? __check_object_size.part.0+0x21c/0x2c0
[ 32.149967] ip_finish_output2+0x278/0x560
[ 32.150327] __ip_finish_output+0x1fe/0x2f0
[ 32.150690] ip_finish_output+0x2a/0xd0
[ 32.151032] ip_output+0x7a/0x110
[ 32.151337] ? __pfx_ip_finish_output+0x10/0x10
[ 32.151733] ip_local_out+0x5e/0x70
[ 32.152054] ip_send_skb+0x19/0x50
[ 32.152366] udp_send_skb.isra.0+0x163/0x3a0
[ 32.152736] udp_sendmsg+0xba8/0xec0
[ 32.153060] ? __folio_memcg_unlock+0x25/0x60
[ 32.153445] ? __pfx_ip_generic_getfrag+0x10/0x10
[ 32.153854] ? sock_has_perm+0x85/0xa0
[ 32.154190] inet_sendmsg+0x6d/0x80
[ 32.154508] ? inet_sendmsg+0x6d/0x80
[ 32.154838] sock_sendmsg+0x62/0x70
[ 32.155152] ____sys_sendmsg+0x134/0x290
[ 32.155499] ___sys_sendmsg+0x81/0xc0
[ 32.155828] ? _get_random_bytes.part.0+0x79/0x1a0
[ 32.156240] ? ip4_datagram_release_cb+0x5f/0x1e0
[ 32.156649] ? get_random_u16+0x69/0xf0
[ 32.156989] ? __fget_light+0xcf/0x110
[ 32.157326] __sys_sendmmsg+0xc4/0x210
[ 32.157657] ? __sys_connect+0xb7/0xe0
[ 32.157995] ? __audit_syscall_entry+0xce/0x140
[ 32.158388] ? syscall_trace_enter.isra.0+0x12c/0x1a0
[ 32.158820] __x64
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.25-1 (bookworm) | linux 6.1.25-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= cfc80d9a11635404a40199a1c9471c96890f3f74 < 105cc268328231d5c2bfcbd03f265cec444a3492 | 105cc268328231d5c2bfcbd03f265cec444a3492 |
| linux | linux | >= cfc80d9a11635404a40199a1c9471c96890f3f74 < f032e125149d914e542548c17ebd613851031368 | f032e125149d914e542548c17ebd613851031368 |
| linux | linux | >= cfc80d9a11635404a40199a1c9471c96890f3f74 < 2d5cebf57296f0189a61482035ad420384eedead | 2d5cebf57296f0189a61482035ad420384eedead |
| linux | linux | >= cfc80d9a11635404a40199a1c9471c96890f3f74 < c942f5cd63b7c2e73fe06744185a34b03267595b | c942f5cd63b7c2e73fe06744185a34b03267595b |
| linux | linux | >= cfc80d9a11635404a40199a1c9471c96890f3f74 < 44d250c22209c680f61befbc2ac326da5452da01 | 44d250c22209c680f61befbc2ac326da5452da01 |
| linux | linux | >= cfc80d9a11635404a40199a1c9471c96890f3f74 < e3cbdcb0fbb61045ef3ce0e072927cc41737f787 | e3cbdcb0fbb61045ef3ce0e072927cc41737f787 |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.25-1 | 6.1.25-1 |
| linux | linux_kernel | >= 0 < 6.1.25-1 | 6.1.25-1 |
| linux | linux_kernel | >= 0 < 6.1.25-1 | 6.1.25-1 |
| linux | linux_kernel | >= 4.18.0 < 5.4.240 | 5.4.240 |
| linux | linux_kernel | >= 5.11.0 < 5.15.106 | 5.15.106 |
| linux | linux_kernel | >= 5.16.0 < 6.1.23 | 6.1.23 |
| linux | linux_kernel | >= 5.5.0 < 5.10.177 | 5.10.177 |
| linux | linux_kernel | >= 6.2.0 < 6.2.10 | 6.2.10 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Linux Kernel up to 6.2.9 net_failover privilege escalation (Nessus ID 280806 / WID-SEC-2025-2941)
vuldb·2026-04-27
CVE-2023-54236 [LOW] Linux Kernel up to 6.2.9 net_failover privilege escalation (Nessus ID 280806 / WID-SEC-2025-2941)
A vulnerability identified as problematic has been detected in Linux Kernel up to 5.4.239/5.10.176/5.15.105/6.1.22/6.2.9. The affected element is an unknown function of the component net_failover. Performing a manipulation results in privilege escalation.
This vulnerability is cataloged as CVE-2023-54236. The attack must originate from the local network. There is no exploit available.
You should upgrade the affected component.
GHSA
GHSA-9c88-mg4g-wxx2: In the Linux kernel, the following vulnerability has been resolved:
net/net_failover: fix txq exceeding warning
The failover txq is inited as 16 que
ghsa_unreviewed·2025-12-30
CVE-2023-54236 GHSA-9c88-mg4g-wxx2: In the Linux kernel, the following vulnerability has been resolved:
net/net_failover: fix txq exceeding warning
The failover txq is inited as 16 que
In the Linux kernel, the following vulnerability has been resolved:
net/net_failover: fix txq exceeding warning
The failover txq is inited as 16 queues.
when a packet is transmitted from the failover device firstly,
the failover device will select the queue which is returned from
the primary device if the primary device is UP and running.
If the primary device txq is bigger than the default 16,
it can lead to the following warning:
eth0 selects TX queue 18, but real number of TX queues is 16
The warning backtrace is:
[ 32.146376] CPU: 18 PID: 9134 Comm: chronyd Tainted: G E 6.2.8-1.el7.centos.x86_64 #1
[ 32.147175] Hardware name: Red Hat KVM, BIOS 1.10.2-3.el7_4.1 04/01/2014
[ 32.147730] Call Trace:
[ 32.147971]
[ 32.148183] dump_stack_lvl+0x48/0x70
[ 32.148514] dump_stack+0x10/0x20
[ 3
OSV
net/net_failover: fix txq exceeding warning
osv·2025-12-30
CVE-2023-54236 net/net_failover: fix txq exceeding warning
net/net_failover: fix txq exceeding warning
In the Linux kernel, the following vulnerability has been resolved:
net/net_failover: fix txq exceeding warning
The failover txq is inited as 16 queues.
when a packet is transmitted from the failover device firstly,
the failover device will select the queue which is returned from
the primary device if the primary device is UP and running.
If the primary device txq is bigger than the default 16,
it can lead to the following warning:
eth0 selects TX queue 18, but real number of TX queues is 16
The warning backtrace is:
[ 32.146376] CPU: 18 PID: 9134 Comm: chronyd Tainted: G E 6.2.8-1.el7.centos.x86_64 #1
[ 32.147175] Hardware name: Red Hat KVM, BIOS 1.10.2-3.el7_4.1 04/01/2014
[ 32.147730] Call Trace:
[ 32.147971]
[ 32.148183] dump_stack_lvl+0x
OSV
CVE-2023-54236: In the Linux kernel, the following vulnerability has been resolved: net/net_failover: fix txq exceeding warning The failover txq is inited as 16 queue
osv·2025-12-30
CVE-2023-54236 CVE-2023-54236: In the Linux kernel, the following vulnerability has been resolved: net/net_failover: fix txq exceeding warning The failover txq is inited as 16 queue
In the Linux kernel, the following vulnerability has been resolved: net/net_failover: fix txq exceeding warning The failover txq is inited as 16 queues. when a packet is transmitted from the failover device firstly, the failover device will select the queue which is returned from the primary device if the primary device is UP and running. If the primary device txq is bigger than the default 16, it can lead to the following warning: eth0 selects TX queue 18, but real number of TX queues is 16 The warning backtrace is: [ 32.146376] CPU: 18 PID: 9134 Comm: chronyd Tainted: G E 6.2.8-1.el7.centos.x86_64 #1 [ 32.147175] Hardware name: Red Hat KVM, BIOS 1.10.2-3.el7_4.1 04/01/2014 [ 32.147730] Call Trace: [ 32.147971] [ 32.148183] dump_stack_lvl+0x48/0x70 [ 32.148514] dump_stack+0x10/0x20 [ 32.1
Red Hat
kernel: net/net_failover: fix txq exceeding warning
vendor_redhat·2025-12-30·CVSS 5.8
CVE-2023-54236 [MEDIUM] CWE-131 kernel: net/net_failover: fix txq exceeding warning
kernel: net/net_failover: fix txq exceeding warning
In the Linux kernel, the following vulnerability has been resolved:
net/net_failover: fix txq exceeding warning
The failover txq is inited as 16 queues.
when a packet is transmitted from the failover device firstly,
the failover device will select the queue which is returned from
the primary device if the primary device is UP and running.
If the primary device txq is bigger than the default 16,
it can lead to the following warning:
eth0 selects TX queue 18, but real number of TX queues is 16
The warning backtrace is:
[ 32.146376] CPU: 18 PID: 9134 Comm: chronyd Tainted: G E 6.2.8-1.el7.centos.x86_64 #1
[ 32.147175] Hardware name: Red Hat KVM, BIOS 1.10.2-3.el7_4.1 04/01/2014
[ 32.147730] Call Trace:
[ 32.147971]
[ 32.148183] dump_stack_l
Debian
CVE-2023-54236: linux - In the Linux kernel, the following vulnerability has been resolved: net/net_fai...
vendor_debian·2023
CVE-2023-54236 CVE-2023-54236: linux - In the Linux kernel, the following vulnerability has been resolved: net/net_fai...
In the Linux kernel, the following vulnerability has been resolved: net/net_failover: fix txq exceeding warning The failover txq is inited as 16 queues. when a packet is transmitted from the failover device firstly, the failover device will select the queue which is returned from the primary device if the primary device is UP and running. If the primary device txq is bigger than the default 16, it can lead to the following warning: eth0 selects TX queue 18, but real number of TX queues is 16 The warning backtrace is: [ 32.146376] CPU: 18 PID: 9134 Comm: chronyd Tainted: G E 6.2.8-1.el7.centos.x86_64 #1 [ 32.147175] Hardware name: Red Hat KVM, BIOS 1.10.2-3.el7_4.1 04/01/2014 [ 32.147730] Call Trace: [ 32.147971] [ 32.148183] dump_stack_lvl+0x48/0x70 [ 32.148514] dump_stack+0x10/0x20 [ 32.1
No detection rules found.
No public exploits indexed.
Wiz
CVE-2023-54236 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2023-54236 CVE-2023-54236 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2023-54236 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
net/net_failover: fix txq exceeding warning
The failover txq is inited as 16 queues.
when a packet is transmitted from the failover device firstly,
the failover device will select the queue which is returned from
the primary device if the primary device is UP and running.
If the primary device txq is bigger than the default 16,
it can lead to the following warning:
eth0 selects TX queue 18, but real number of TX queues is 16
The warning backtrace is:
[ 32.146376] CPU: 18 PID: 9134 Comm: chronyd Tainted: G E 6.2.8-1.el7.centos.x86_64 #1
[ 32.147175] Hardware name: Red Hat KVM, BIOS 1.10.2-3.el7_4.1 04/01/2014
[ 32.147730] Call Trace:
[ 32.147971] [
Bugzilla
CVE-2023-54236 kernel: net/net_failover: fix txq exceeding warning
bugzilla·2025-12-30
CVE-2023-54236 [MEDIUM] CVE-2023-54236 kernel: net/net_failover: fix txq exceeding warning
CVE-2023-54236 kernel: net/net_failover: fix txq exceeding warning
In the Linux kernel, the following vulnerability has been resolved:
net/net_failover: fix txq exceeding warning
The failover txq is inited as 16 queues.
when a packet is transmitted from the failover device firstly,
the failover device will select the queue which is returned from
the primary device if the primary device is UP and running.
If the primary device txq is bigger than the default 16,
it can lead to the following warning:
eth0 selects TX queue 18, but real number of TX queues is 16
The warning backtrace is:
[ 32.146376] CPU: 18 PID: 9134 Comm: chronyd Tainted: G E 6.2.8-1.el7.centos.x86_64 #1
[ 32.147175] Hardware name: Red Hat KVM, BIOS 1.10.2-3.el7_4.1 04/01/2014
[ 32.147730] Call Trace:
[ 32.147971]
[ 32.14
https://git.kernel.org/stable/c/105cc268328231d5c2bfcbd03f265cec444a3492https://git.kernel.org/stable/c/2d5cebf57296f0189a61482035ad420384eedeadhttps://git.kernel.org/stable/c/44d250c22209c680f61befbc2ac326da5452da01https://git.kernel.org/stable/c/c942f5cd63b7c2e73fe06744185a34b03267595bhttps://git.kernel.org/stable/c/e3cbdcb0fbb61045ef3ce0e072927cc41737f787https://git.kernel.org/stable/c/f032e125149d914e542548c17ebd613851031368
2025-12-30
Published