CVE-2023-53731

Linux Kernel Deadlock in netlink_set_err()

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: netlink: fix potential deadlock in netlink_set_err() syzbot reported a possible deadlock in netlink_set_err() [1] A similar issue was fixed in commit 1d482e666b8e ("netlink: disable IRQs for netlink_lock_table()") in netlink_lock_table() This patch adds IRQ safety to netlink_set_err() and __netlink_diag_dump() which were not covered by cited commit. [1] WARNING: possible irq lock inversion dependency detected 6.4.0-rc6-syzkaller-00240-g4e9f0ec38852 #0 Not tainted syz-executor.2/23011 just changed the state of lock: ffffffff8e1a7a58 (nl_table_lock){.+.?}-{2:2}, at: netlink_set_err+0x2e/0x3a0 net/netlink/af_netlink.c:1612 but this lock was taken by another, SOFTIRQ-safe lock in the past: (&local->queue_stop_reason_lock){..-.}-{2:2} and interrupts could create inverse lock ordering between them. other info that might help us debug this: Possible interrupt unsafe locking scenario: CPU0 CPU1 ---- ---- lock(nl_table_lock); local_irq_disable(); lock(&local->queue_stop_reason_lock); lock(nl_table_lock); <Interrupt> lock(&local->queue_stop_reason_lock); *** DEADLOCK ***

Scores

EPSS 0.0022
EPSS Percentile 12.2%

Details

Status published
Products (38)
linux/Kernel < 4.14.322linux
linux/Kernel 4.15.0 - 4.19.291linux
linux/Kernel 4.20.0 - 5.4.251linux
linux/Kernel 5.11.0 - 5.15.121linux
linux/Kernel 5.13.0 - 6.1.39linux
linux/Kernel 5.16.0 - 6.3.13linux
linux/Kernel 5.5.0 - 5.10.188linux
linux/Kernel 6.2.0 - 6.4.4linux
Linux/Linux < 5.13
Linux/Linux 1d482e666b8e74c7555dbdfbfb77205eeed3ff2d - 1556ba034b95cfd4f75ea93c1a2679ae0444bba1
... and 28 more
Published Oct 22, 2025
Tracked Since Feb 18, 2026