CVE-2023-53731

netlink: fix potential deadlock in netlink_set_err()

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

netlink: fix potential deadlock in netlink_set_err()

syzbot reported a possible deadlock in netlink_set_err() [1]

A similar issue was fixed in commit 1d482e666b8e ("netlink: disable IRQs for netlink_lock_table()") in netlink_lock_table()

This patch adds IRQ safety to netlink_set_err() and __netlink_diag_dump() which were not covered by cited commit.

[1]

WARNING: possible irq lock inversion dependency detected 6.4.0-rc6-syzkaller-00240-g4e9f0ec38852 #0 Not tainted

syz-executor.2/23011 just changed the state of lock: ffffffff8e1a7a58 (nl_table_lock){.+.?}-{2:2}, at: netlink_set_err+0x2e/0x3a0 net/netlink/af_netlink.c:1612 but this lock was taken by another, SOFTIRQ-safe lock in the past: (&local->queue_stop_reason_lock){..-.}-{2:2}

and interrupts could create inverse lock ordering between them.

other info that might help us debug this: Possible interrupt unsafe locking scenario:

   CPU0                    CPU1
   ----                    ----

lock(nl_table_lock); local_irq_disable(); lock(&local->queue_stop_reason_lock); lock(nl_table_lock); <Interrupt> lock(&local->queue_stop_reason_lock);

*** DEADLOCK ***

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.23%Up 0.2 points since Oct 23, 2025

What each source reports

OSV Score usedRHSA-2024:9315 7.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2024:9315
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

CVE List No score

netlink: fix potential deadlock in netlink_set_err()

In the Linux kernel, the following vulnerability has been resolved:

netlink: fix potential deadlock in netlink_set_err()

syzbot reported a possible deadlock in netlink_set_err() [1]

A similar issue was fixed in commit 1d482e666b8e ("netlink: disable IRQs for netlink_lock_table()") in netlink_lock_table()

This patch adds IRQ safety to netlink_set_err() and __netlink_diag_dump() which were not covered by cited commit.

[1]

WARNING: possible irq lock inversion dependency detected 6.4.0-rc6-syzkaller-00240-g4e9f0ec38852 #0 Not tainted

and interrupts could create inverse lock ordering between them.

other info that might help us debug this: Possible interrupt unsafe locking scenario:

   CPU0                    CPU1
   ----                    ----

lock(nl_table_lock); local_irq_disable(); lock(&local->queue_stop_reason_lock); lock(nl_table_lock); <Interrupt> lock(&local->queue_stop_reason_lock);

*** DEADLOCK ***

Record: CVE-2023-53731
Updated: 2026-11-02

EUVDEUVD-2023-59997 No score

In the Linux kernel, the following vulnerability has been resolved:

netlink: fix potential deadlock in netlink_set_err()

syzbot reported a possible deadlock in netlink_set_err() [1]

A similar issue was fixed in commit 1d482e666b8e ("netlink: disable IRQs for netlink_lock_table()") in netlink_lock_table()

This patch adds IRQ safety to netlink_set_err() and __netlink_diag_dump() which were not covered by cited commit.

[1]

WARNING: possible irq lock inversion dependency detected 6.4.0-rc6-syzkaller-00240-g4e9f0ec38852 #0 Not tainted

and interrupts could create inverse lock ordering between them.

other info that might help us debug this: Possible interrupt unsafe locking scenario:

   CPU0                    CPU1
   ----                    ----

lock(nl_table_lock); local_irq_disable(); lock(&local->queue_stop_reason_lock); lock(nl_table_lock); <Interrupt> lock(&local->queue_stop_reason_lock);

*** DEADLOCK ***

Record: EUVD-2023-59997
Updated: 2026-11-02

GitHub AdvisoriesGHSA-cj8f-58h8-h475 No score

In the Linux kernel, the following vulnerability has been resolved: netlink: fix potential...

In the Linux kernel, the following vulnerability has been resolved:

netlink: fix potential deadlock in netlink_set_err()

syzbot reported a possible deadlock in netlink_set_err() [1]

A similar issue was fixed in commit 1d482e666b8e ("netlink: disable IRQs for netlink_lock_table()") in netlink_lock_table()

This patch adds IRQ safety to netlink_set_err() and __netlink_diag_dump() which were not covered by cited commit.

[1]

WARNING: possible irq lock inversion dependency detected 6.4.0-rc6-syzkaller-00240-g4e9f0ec38852 #0 Not tainted

and interrupts could create inverse lock ordering between them.

other info that might help us debug this: Possible interrupt unsafe locking scenario:

   CPU0                    CPU1
   ----                    ----

lock(nl_table_lock); local_irq_disable(); lock(&local->queue_stop_reason_lock); lock(nl_table_lock); <Interrupt> lock(&local->queue_stop_reason_lock);

*** DEADLOCK ***

Record: GHSA-cj8f-58h8-h475
Updated: 2026-11-02

NVD No score

In the Linux kernel, the following vulnerability has been resolved:

netlink: fix potential deadlock in netlink_set_err()

syzbot reported a possible deadlock in netlink_set_err() [1]

A similar issue was fixed in commit 1d482e666b8e ("netlink: disable IRQs for netlink_lock_table()") in netlink_lock_table()

This patch adds IRQ safety to netlink_set_err() and __netlink_diag_dump() which were not covered by cited commit.

[1]

WARNING: possible irq lock inversion dependency detected 6.4.0-rc6-syzkaller-00240-g4e9f0ec38852 #0 Not tainted

and interrupts could create inverse lock ordering between them.

other info that might help us debug this: Possible interrupt unsafe locking scenario:

   CPU0                    CPU1
   ----                    ----

lock(nl_table_lock); local_irq_disable(); lock(&local->queue_stop_reason_lock); lock(nl_table_lock); <Interrupt> lock(&local->queue_stop_reason_lock);

*** DEADLOCK ***

Record: CVE-2023-53731
Updated: 2026-11-02

OSVCLSA-2026-1777616064 No score

kernel: Fix of 264 CVEs

crypto: algif_aead - Fix minimum RX size check for decryption {CVE-2026-31431}
crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl {CVE-2026-31431}
crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-31431}
crypto: authencesn - Fix src offset when decrypting in-place {CVE-2026-31431}
crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption {CVE-2026-31431}
crypto: authenc - use memcpy_sglist() instead of null skcipher {CVE-2026-31431}
crypto: algif_aead - snapshot IV for async AEAD requests {CVE-2026-31431}
crypto: algif_aead - Revert to operating out-of-place {CVE-2026-31431}
crypto: algif_aead - use memcpy_sglist() instead of null skcipher {CVE-2026-31431}
crypto: scatterwalk - Backport memcpy_sglist() {CVE-2026-31431}
wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() {CVE-2022-50551}
bonding: limit BOND_MODE_8023AD to Ethernet devices {CVE-2026-23099}
libceph: make decode_pool() more resilient against corrupted osdmaps {CVE-2025-71116}
scsi: qla2xxx: Fix bsg_done() causing double free {CVE-2025-71238}
ftrace: Fix use-after-free for dynamic ftrace_ops {CVE-2022-49892}
intel_th: msu: Fix vmalloced buffers {CVE-2022-50142}
vt: Clear selection before changing the font {CVE-2022-49948}
ACPICA: Fix error code path in acpi_ds_call_control_method() {CVE-2022-50411}
usbnet: Run unregister_netdev() before unbind_all() {CVE-2022-50220}
ipvs: fix WARNING in ip_vs_app_net_cleanup() {CVE-2022-49917}
bpf: Propagate error from htab_lock_bucket() to userspace {CVE-2022-50490}
binfmt_misc: fix shift-out-of-bounds in check_special_flags {CVE-2022-50497}
module: fix [e_shstrndx].sh_size=0 OOB access {CVE-2022-49444}
ceph: avoid putting the realm twice when decoding snaps fails {CVE-2022-49770}
tracing: Fix potential double free in create_var_ref() {CVE-2022-49410}
powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue {CVE-2022-50366}
Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times {CVE-2022-50419}
xsk: Fix xsk_diag use-after-free error during socket cleanup {CVE-2023-53426}
svcrdma: bound check rq_pages index in inline path {CVE-2025-71068}
net: hns3: add VLAN id validation before using {CVE-2025-71112}
net: mdio: fix undefined behavior in bit shift for __mdiobus_register {CVE-2022-49907}
capabilities: fix undefined behavior in bit shift for CAP_TO_MASK {CVE-2022-49870}
ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS {CVE-2022-50315}
i2c: piix4: Fix adapter not be removed in piix4_remove() {CVE-2022-49900}
team: fix check for port enabled in team_queue_override_port_prio_changed() {CVE-2025-71091}
staging: vme_user: Fix possible UAF in tsi148_dma_list_add {CVE-2022-50384}
ALSA: ctxfi: Fix potential OOB access in audio mixer handling {CVE-2026-23076}
ftrace: Add cond_resched() to ftrace_graph_set_hash() {CVE-2025-37940}
net: stmmac: Fix accessing freed irq affinity_hint {CVE-2025-23155}
ext4: set goal start correctly in ext4_mb_normalize_request {CVE-2023-54021}
netfilter: ipset: fix region locking in hash types {CVE-2025-37997}
openvswitch: Fix unsafe attribute parsing in output_userspace() {CVE-2025-37998}
wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() {CVE-2025-37990}
nfs: handle failure of nfs_get_lock_context in unlock path {CVE-2025-38023}
drm/amd/pm: Prevent division by zero {CVE-2025-37767}
netfilter: ctnetlink: remove refcounting in expectation dumpers {CVE-2025-39764}
tracing: Fix null pointer dereference in tracing_err_log_open() {CVE-2023-53167}
ACPICA: Refuse to evaluate a method if arguments are missing {CVE-2025-38386}
scsi: qla2xxx: Pointer may be dereferenced {CVE-2023-53150}
net: pktgen: fix access outside of user given buffer in pktgen_thread_write() {CVE-2025-38061}
dm cache: prevent BUG_ON by blocking retries on failed device resumes {CVE-2025-38066} -…

Record: CLSA-2026-1777616064
Updated: 2026-11-02

Show 13 moreShow less

OSV No score

netlink: fix potential deadlock in netlink_set_err()

In the Linux kernel, the following vulnerability has been resolved:

netlink: fix potential deadlock in netlink_set_err()

syzbot reported a possible deadlock in netlink_set_err() [1]

A similar issue was fixed in commit 1d482e666b8e ("netlink: disable IRQs for netlink_lock_table()") in netlink_lock_table()

This patch adds IRQ safety to netlink_set_err() and __netlink_diag_dump() which were not covered by cited commit.

[1]

WARNING: possible irq lock inversion dependency detected 6.4.0-rc6-syzkaller-00240-g4e9f0ec38852 #0 Not tainted

and interrupts could create inverse lock ordering between them.

other info that might help us debug this: Possible interrupt unsafe locking scenario:

   CPU0                    CPU1
   ----                    ----

lock(nl_table_lock); local_irq_disable(); lock(&local->queue_stop_reason_lock); lock(nl_table_lock); <Interrupt> lock(&local->queue_stop_reason_lock);

*** DEADLOCK ***

Record: CVE-2023-53731
Updated: 2026-11-02

OSVDEBIAN-CVE-2023-53731 No score

In the Linux kernel, the following vulnerability has been resolved: netlink: fix potential deadlock in netlink_set_err() syzbot reported a possible deadlock in netlink_set_err() [1] A similar issue was fixed in commit 1d482e666b8e ("netlink: disable IRQs for netlink_lock_table()") in netlink_lock_table() This patch adds IRQ safety to netlink_set_err() and __netlink_diag_dump() which were not covered by cited commit. [1] WARNING: possible irq lock inversion dependency detected 6.4.0-rc6-syzkaller-00240-g4e9f0ec38852 #0 Not tainted syz-executor.2/23011 just changed the state of lock: ffffffff8e1a7a58 (nl_table_lock){.+.?}-{2:2}, at: netlink_set_err+0x2e/0x3a0 net/netlink/af_netlink.c:1612 but this lock was taken by another, SOFTIRQ-safe lock in the past: (&local->queue_stop_reason_lock){..-.}-{2:2} and interrupts could create inverse lock ordering between them. other info that might help us debug this: Possible interrupt unsafe locking scenario: CPU0 CPU1 ---- ---- lock(nl_table_lock); local_irq_disable(); lock(&local->queue_stop_reason_lock); lock(nl_table_lock); <Interrupt> lock(&local->queue_stop_reason_lock); *** DEADLOCK ***

Record: DEBIAN-CVE-2023-53731
Updated: 2026-11-02

OSVSUSE-SU-2025:21040-1 No score