CVE-2023-53731 - CVE House
Back to Database
Status published Unknown CVE-2023-53731

netlink: fix potential deadlock in netlink_set_err()

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: netlink: fix potential deadlock in netlink_set_err() syzbot reported a possible deadlock in netlink_set_err() [1] A similar issue was fixed in commit 1d482e666b8e ("netlink: disable IRQs for netlink_lock_table()") in netlink_lock_table() This patch adds IRQ safety to netlink_set_err() and __netlink_diag_dump() which were not covered by cited commit. [1] WARNING: possible irq lock inversion dependency detected 6.4.0-rc6-syzkaller-00240-g4e9f0ec38852 #0 Not tainted syz-executor.2/23011 just changed the state of lock: ffffffff8e1a7a58 (nl_table_lock){.+.?}-{2:2}, at: netlink_set_err+0x2e/0x3a0 net/netlink/af_netlink.c:1612 but this lock was taken by another, SOFTIRQ-safe lock in the past: (&local->queue_stop_reason_lock){..-.}-{2:2} and interrupts could create inverse lock ordering between them. other info that might help us debug this: Possible interrupt unsafe locking scenario: CPU0 CPU1 ---- ---- lock(nl_table_lock); local_irq_disable(); lock(&local->queue_stop_reason_lock); lock(nl_table_lock); <Interrupt> lock(&local->queue_stop_reason_lock); *** DEADLOCK ***

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-53731

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Linux
Vulnerable Versions:
82b2ea5f904b3826934df4a00f3b8806272185f6, 59fba11d649854134c75ad88c8adafa9304ac419, 21df0c2e7d195de4a3c650de9361b3037fa6c59a, 1d6d43d4805da9b3fa0f5841e8b1083c89868f35, 1d482e666b8e74c7555dbdfbfb77205eeed3ff2d, 5f155c4046200f067b1dc3140ea99ef56e4e0b74, a8e9111a8625dd11e70edd61f7a1ccd26c041442, 76cc8e04f38c2bbfcba07f62864a011f142bd40c, 4.14.237, 4.19.195, 5.4.126, 5.10.44, 4.4.273, 4.9.273, 5.12.11, 5.13, 0, 4.14.322, 4.19.291, 5.4.251, 5.10.188, 5.15.121, 6.1.39, 6.3.13, 6.4.4, 6.5

Timeline

Official Publish: October 22nd, 2025
Last Modified: May 23rd, 2026
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.