Vulnerability-Lookup

CVE-2023-53731 (GCVE-0-2023-53731)

Vulnerability from cvelistv5 – Published: 2025-10-22 13:23 – Updated: 2026-05-23 15:30

Title

netlink: fix potential deadlock in netlink_set_err()

Summary

In the Linux kernel, the following vulnerability has been resolved: netlink: fix potential deadlock in netlink_set_err() syzbot reported a possible deadlock in netlink_set_err() [1] A similar issue was fixed in commit 1d482e666b8e ("netlink: disable IRQs for netlink_lock_table()") in netlink_lock_table() This patch adds IRQ safety to netlink_set_err() and __netlink_diag_dump() which were not covered by cited commit. [1] WARNING: possible irq lock inversion dependency detected 6.4.0-rc6-syzkaller-00240-g4e9f0ec38852 #0 Not tainted syz-executor.2/23011 just changed the state of lock: ffffffff8e1a7a58 (nl_table_lock){.+.?}-{2:2}, at: netlink_set_err+0x2e/0x3a0 net/netlink/af_netlink.c:1612 but this lock was taken by another, SOFTIRQ-safe lock in the past: (&local->queue_stop_reason_lock){..-.}-{2:2} and interrupts could create inverse lock ordering between them. other info that might help us debug this: Possible interrupt unsafe locking scenario: CPU0 CPU1 ---- ---- lock(nl_table_lock); local_irq_disable(); lock(&local->queue_stop_reason_lock); lock(nl_table_lock); <Interrupt> lock(&local->queue_stop_reason_lock); *** DEADLOCK ***

Severity

No CVSS data available.

Assigner

Linux mitre root

References

9 references

URL	Tags
https://git.kernel.org/stable/c/c09e8e3f7fd432984…
https://git.kernel.org/stable/c/4b9adb8d4a62ff760…
https://git.kernel.org/stable/c/8f6652ed2ad98fe6d…
https://git.kernel.org/stable/c/cde7b90e0539a3b11…
https://git.kernel.org/stable/c/a641240b7e071c553…
https://git.kernel.org/stable/c/61ffe8b1ee084e5c8…
https://git.kernel.org/stable/c/eb8e27c8fa9397b4a…
https://git.kernel.org/stable/c/1556ba034b95cfd4f…
https://git.kernel.org/stable/c/8d61f926d42045961…

Impacted products

2 products

Vendor	Product	Version	CPE status
Linux	Linux	Affected: 82b2ea5f904b3826934df4a00f3b8806272185f6 , < c09e8e3f7fd432984bf5422302b093d2371dfc48 (git) Affected: 59fba11d649854134c75ad88c8adafa9304ac419 , < 4b9adb8d4a62ff7608d4a7d4eb42036a88f30980 (git) Affected: 21df0c2e7d195de4a3c650de9361b3037fa6c59a , < 8f6652ed2ad98fe6d13b903483d9257762ab2ec6 (git) Affected: 1d6d43d4805da9b3fa0f5841e8b1083c89868f35 , < cde7b90e0539a3b11da377e463dfd2288a162dbf (git) Affected: 1d482e666b8e74c7555dbdfbfb77205eeed3ff2d , < a641240b7e071c5538dc0e7894ece833fce459dd (git) Affected: 1d482e666b8e74c7555dbdfbfb77205eeed3ff2d , < 61ffe8b1ee084e5c82a4e4bbf9e7b68e0c06e464 (git) Affected: 1d482e666b8e74c7555dbdfbfb77205eeed3ff2d , < eb8e27c8fa9397b4a7b181c48fa58157dbe9902e (git) Affected: 1d482e666b8e74c7555dbdfbfb77205eeed3ff2d , < 1556ba034b95cfd4f75ea93c1a2679ae0444bba1 (git) Affected: 1d482e666b8e74c7555dbdfbfb77205eeed3ff2d , < 8d61f926d42045961e6b65191c09e3678d86a9cf (git) Affected: 5f155c4046200f067b1dc3140ea99ef56e4e0b74 (git) Affected: a8e9111a8625dd11e70edd61f7a1ccd26c041442 (git) Affected: 76cc8e04f38c2bbfcba07f62864a011f142bd40c (git) Affected: 4.14.237 , < 4.14.322 (semver) Affected: 4.19.195 , < 4.19.291 (semver) Affected: 5.4.126 , < 5.4.251 (semver) Affected: 5.10.44 , < 5.10.188 (semver) Affected: 4.4.273 , < 4.5 (semver) Affected: 4.9.273 , < 4.10 (semver) Affected: 5.12.11 , < 5.13 (semver)	guessed
Linux	Linux	Affected: 5.13 Unaffected: 0 , < 5.13 (semver) Unaffected: 4.14.322 , ≤ 4.14.* (semver) Unaffected: 4.19.291 , ≤ 4.19.* (semver) Unaffected: 5.4.251 , ≤ 5.4.* (semver) Unaffected: 5.10.188 , ≤ 5.10.* (semver) Unaffected: 5.15.121 , ≤ 5.15.* (semver) Unaffected: 6.1.39 , ≤ 6.1.* (semver) Unaffected: 6.3.13 , ≤ 6.3.* (semver) Unaffected: 6.4.4 , ≤ 6.4.* (semver) Unaffected: 6.5 , ≤ * (original_commit_for_fix)	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/netlink/af_netlink.c",
            "net/netlink/diag.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "c09e8e3f7fd432984bf5422302b093d2371dfc48",
              "status": "affected",
              "version": "82b2ea5f904b3826934df4a00f3b8806272185f6",
              "versionType": "git"
            },
            {
              "lessThan": "4b9adb8d4a62ff7608d4a7d4eb42036a88f30980",
              "status": "affected",
              "version": "59fba11d649854134c75ad88c8adafa9304ac419",
              "versionType": "git"
            },
            {
              "lessThan": "8f6652ed2ad98fe6d13b903483d9257762ab2ec6",
              "status": "affected",
              "version": "21df0c2e7d195de4a3c650de9361b3037fa6c59a",
              "versionType": "git"
            },
            {
              "lessThan": "cde7b90e0539a3b11da377e463dfd2288a162dbf",
              "status": "affected",
              "version": "1d6d43d4805da9b3fa0f5841e8b1083c89868f35",
              "versionType": "git"
            },
            {
              "lessThan": "a641240b7e071c5538dc0e7894ece833fce459dd",
              "status": "affected",
              "version": "1d482e666b8e74c7555dbdfbfb77205eeed3ff2d",
              "versionType": "git"
            },
            {
              "lessThan": "61ffe8b1ee084e5c82a4e4bbf9e7b68e0c06e464",
              "status": "affected",
              "version": "1d482e666b8e74c7555dbdfbfb77205eeed3ff2d",
              "versionType": "git"
            },
            {
              "lessThan": "eb8e27c8fa9397b4a7b181c48fa58157dbe9902e",
              "status": "affected",
              "version": "1d482e666b8e74c7555dbdfbfb77205eeed3ff2d",
              "versionType": "git"
            },
            {
              "lessThan": "1556ba034b95cfd4f75ea93c1a2679ae0444bba1",
              "status": "affected",
              "version": "1d482e666b8e74c7555dbdfbfb77205eeed3ff2d",
              "versionType": "git"
            },
            {
              "lessThan": "8d61f926d42045961e6b65191c09e3678d86a9cf",
              "status": "affected",
              "version": "1d482e666b8e74c7555dbdfbfb77205eeed3ff2d",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "5f155c4046200f067b1dc3140ea99ef56e4e0b74",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "a8e9111a8625dd11e70edd61f7a1ccd26c041442",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "76cc8e04f38c2bbfcba07f62864a011f142bd40c",
              "versionType": "git"
            },
            {
              "lessThan": "4.14.322",
              "status": "affected",
              "version": "4.14.237",
              "versionType": "semver"
            },
            {
              "lessThan": "4.19.291",
              "status": "affected",
              "version": "4.19.195",
              "versionType": "semver"
            },
            {
              "lessThan": "5.4.251",
              "status": "affected",
              "version": "5.4.126",
              "versionType": "semver"
            },
            {
              "lessThan": "5.10.188",
              "status": "affected",
              "version": "5.10.44",
              "versionType": "semver"
            },
            {
              "lessThan": "4.5",
              "status": "affected",
              "version": "4.4.273",
              "versionType": "semver"
            },
            {
              "lessThan": "4.10",
              "status": "affected",
              "version": "4.9.273",
              "versionType": "semver"
            },
            {
              "lessThan": "5.13",
              "status": "affected",
              "version": "5.12.11",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/netlink/af_netlink.c",
            "net/netlink/diag.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.13"
            },
            {
              "lessThan": "5.13",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.322",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.291",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.251",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.188",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.121",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.39",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.3.*",
              "status": "unaffected",
              "version": "6.3.13",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.4.*",
              "status": "unaffected",
              "version": "6.4.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.5",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.322",
                  "versionStartIncluding": "4.14.237",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.291",
                  "versionStartIncluding": "4.19.195",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.251",
                  "versionStartIncluding": "5.4.126",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.188",
                  "versionStartIncluding": "5.10.44",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.121",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.39",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.3.13",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4.4",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.4.273",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.9.273",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.12.11",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetlink: fix potential deadlock in netlink_set_err()\n\nsyzbot reported a possible deadlock in netlink_set_err() [1]\n\nA similar issue was fixed in commit 1d482e666b8e (\"netlink: disable IRQs\nfor netlink_lock_table()\") in netlink_lock_table()\n\nThis patch adds IRQ safety to netlink_set_err() and __netlink_diag_dump()\nwhich were not covered by cited commit.\n\n[1]\n\nWARNING: possible irq lock inversion dependency detected\n6.4.0-rc6-syzkaller-00240-g4e9f0ec38852 #0 Not tainted\n\nsyz-executor.2/23011 just changed the state of lock:\nffffffff8e1a7a58 (nl_table_lock){.+.?}-{2:2}, at: netlink_set_err+0x2e/0x3a0 net/netlink/af_netlink.c:1612\nbut this lock was taken by another, SOFTIRQ-safe lock in the past:\n (\u0026local-\u003equeue_stop_reason_lock){..-.}-{2:2}\n\nand interrupts could create inverse lock ordering between them.\n\nother info that might help us debug this:\n Possible interrupt unsafe locking scenario:\n\n       CPU0                    CPU1\n       ----                    ----\n  lock(nl_table_lock);\n                               local_irq_disable();\n                               lock(\u0026local-\u003equeue_stop_reason_lock);\n                               lock(nl_table_lock);\n  \u003cInterrupt\u003e\n    lock(\u0026local-\u003equeue_stop_reason_lock);\n\n *** DEADLOCK ***"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-23T15:30:38.411Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/c09e8e3f7fd432984bf5422302b093d2371dfc48"
        },
        {
          "url": "https://git.kernel.org/stable/c/4b9adb8d4a62ff7608d4a7d4eb42036a88f30980"
        },
        {
          "url": "https://git.kernel.org/stable/c/8f6652ed2ad98fe6d13b903483d9257762ab2ec6"
        },
        {
          "url": "https://git.kernel.org/stable/c/cde7b90e0539a3b11da377e463dfd2288a162dbf"
        },
        {
          "url": "https://git.kernel.org/stable/c/a641240b7e071c5538dc0e7894ece833fce459dd"
        },
        {
          "url": "https://git.kernel.org/stable/c/61ffe8b1ee084e5c82a4e4bbf9e7b68e0c06e464"
        },
        {
          "url": "https://git.kernel.org/stable/c/eb8e27c8fa9397b4a7b181c48fa58157dbe9902e"
        },
        {
          "url": "https://git.kernel.org/stable/c/1556ba034b95cfd4f75ea93c1a2679ae0444bba1"
        },
        {
          "url": "https://git.kernel.org/stable/c/8d61f926d42045961e6b65191c09e3678d86a9cf"
        }
      ],
      "title": "netlink: fix potential deadlock in netlink_set_err()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53731",
    "datePublished": "2025-10-22T13:23:59.055Z",
    "dateReserved": "2025-10-22T13:21:37.349Z",
    "dateUpdated": "2026-05-23T15:30:38.411Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-53731",
      "date": "2026-09-19",
      "epss": "0.00216",
      "percentile": "0.12315"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "net/netlink/af_netlink.c",
                  "net/netlink/diag.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "c09e8e3f7fd432984bf5422302b093d2371dfc48",
                    "status": "affected",
                    "version": "82b2ea5f904b3826934df4a00f3b8806272185f6",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "4b9adb8d4a62ff7608d4a7d4eb42036a88f30980",
                    "status": "affected",
                    "version": "59fba11d649854134c75ad88c8adafa9304ac419",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "8f6652ed2ad98fe6d13b903483d9257762ab2ec6",
                    "status": "affected",
                    "version": "21df0c2e7d195de4a3c650de9361b3037fa6c59a",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "cde7b90e0539a3b11da377e463dfd2288a162dbf",
                    "status": "affected",
                    "version": "1d6d43d4805da9b3fa0f5841e8b1083c89868f35",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "a641240b7e071c5538dc0e7894ece833fce459dd",
                    "status": "affected",
                    "version": "1d482e666b8e74c7555dbdfbfb77205eeed3ff2d",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "61ffe8b1ee084e5c82a4e4bbf9e7b68e0c06e464",
                    "status": "affected",
                    "version": "1d482e666b8e74c7555dbdfbfb77205eeed3ff2d",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "eb8e27c8fa9397b4a7b181c48fa58157dbe9902e",
                    "status": "affected",
                    "version": "1d482e666b8e74c7555dbdfbfb77205eeed3ff2d",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "1556ba034b95cfd4f75ea93c1a2679ae0444bba1",
                    "status": "affected",
                    "version": "1d482e666b8e74c7555dbdfbfb77205eeed3ff2d",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "8d61f926d42045961e6b65191c09e3678d86a9cf",
                    "status": "affected",
                    "version": "1d482e666b8e74c7555dbdfbfb77205eeed3ff2d",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "5f155c4046200f067b1dc3140ea99ef56e4e0b74",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "a8e9111a8625dd11e70edd61f7a1ccd26c041442",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "76cc8e04f38c2bbfcba07f62864a011f142bd40c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "4.14.322",
                    "status": "affected",
                    "version": "4.14.237",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "4.19.291",
                    "status": "affected",
                    "version": "4.19.195",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "5.4.251",
                    "status": "affected",
                    "version": "5.4.126",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "5.10.188",
                    "status": "affected",
                    "version": "5.10.44",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "4.5",
                    "status": "affected",
                    "version": "4.4.273",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "4.10",
                    "status": "affected",
                    "version": "4.9.273",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "5.13",
                    "status": "affected",
                    "version": "5.12.11",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "net/netlink/af_netlink.c",
                  "net/netlink/diag.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "5.13"
                  },
                  {
                    "lessThan": "5.13",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "4.14.*",
                    "status": "unaffected",
                    "version": "4.14.322",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "4.19.*",
                    "status": "unaffected",
                    "version": "4.19.291",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.4.*",
                    "status": "unaffected",
                    "version": "5.4.251",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.188",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.121",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.39",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.3.*",
                    "status": "unaffected",
                    "version": "6.3.13",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.4.*",
                    "status": "unaffected",
                    "version": "6.4.4",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "6.5",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetlink: fix potential deadlock in netlink_set_err()\n\nsyzbot reported a possible deadlock in netlink_set_err() [1]\n\nA similar issue was fixed in commit 1d482e666b8e (\"netlink: disable IRQs\nfor netlink_lock_table()\") in netlink_lock_table()\n\nThis patch adds IRQ safety to netlink_set_err() and __netlink_diag_dump()\nwhich were not covered by cited commit.\n\n[1]\n\nWARNING: possible irq lock inversion dependency detected\n6.4.0-rc6-syzkaller-00240-g4e9f0ec38852 #0 Not tainted\n\nsyz-executor.2/23011 just changed the state of lock:\nffffffff8e1a7a58 (nl_table_lock){.+.?}-{2:2}, at: netlink_set_err+0x2e/0x3a0 net/netlink/af_netlink.c:1612\nbut this lock was taken by another, SOFTIRQ-safe lock in the past:\n (\u0026local-\u003equeue_stop_reason_lock){..-.}-{2:2}\n\nand interrupts could create inverse lock ordering between them.\n\nother info that might help us debug this:\n Possible interrupt unsafe locking scenario:\n\n       CPU0                    CPU1\n       ----                    ----\n  lock(nl_table_lock);\n                               local_irq_disable();\n                               lock(\u0026local-\u003equeue_stop_reason_lock);\n                               lock(nl_table_lock);\n  \u003cInterrupt\u003e\n    lock(\u0026local-\u003equeue_stop_reason_lock);\n\n *** DEADLOCK ***"
          }
        ],
        "id": "CVE-2023-53731",
        "lastModified": "2026-06-17T06:45:58.170",
        "metrics": {},
        "published": "2025-10-22T14:15:48.423",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/1556ba034b95cfd4f75ea93c1a2679ae0444bba1"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/4b9adb8d4a62ff7608d4a7d4eb42036a88f30980"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/61ffe8b1ee084e5c82a4e4bbf9e7b68e0c06e464"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/8d61f926d42045961e6b65191c09e3678d86a9cf"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/8f6652ed2ad98fe6d13b903483d9257762ab2ec6"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/a641240b7e071c5538dc0e7894ece833fce459dd"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/c09e8e3f7fd432984bf5422302b093d2371dfc48"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/cde7b90e0539a3b11da377e463dfd2288a162dbf"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/eb8e27c8fa9397b4a7b181c48fa58157dbe9902e"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Deferred"
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-06-30T10:21:34+00:00",
      "cve": "CVE-2023-53731",
      "id": "CVE-2023-53731",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:fixed": "280",
      "product_status:known_affected": "112",
      "product_status:known_not_affected": "84",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: Kernel: Denial of Service due to a Netlink subsystem deadlock",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-53731.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-12T23:56:25Z",
      "cve": "CVE-2023-53731",
      "id": "CVE-2023-53731",
      "initial_release_date": "2025-10-22T23:58:58Z",
      "product_status:known_affected": "522",
      "product_status:known_not_affected": "256",
      "product_status:recommended": "310",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-53731",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-53731.json",
      "version": "41"
    }
  }
}

GHSA-CJ8F-58H8-H475

Vulnerability from github – Published: 2025-10-22 15:31 – Updated: 2025-10-22 15:31

Details

In the Linux kernel, the following vulnerability has been resolved:

netlink: fix potential deadlock in netlink_set_err()

syzbot reported a possible deadlock in netlink_set_err() [1]

A similar issue was fixed in commit 1d482e666b8e ("netlink: disable IRQs for netlink_lock_table()") in netlink_lock_table()

This patch adds IRQ safety to netlink_set_err() and __netlink_diag_dump() which were not covered by cited commit.

[1]

WARNING: possible irq lock inversion dependency detected 6.4.0-rc6-syzkaller-00240-g4e9f0ec38852 #0 Not tainted

syz-executor.2/23011 just changed the state of lock: ffffffff8e1a7a58 (nl_table_lock){.+.?}-{2:2}, at: netlink_set_err+0x2e/0x3a0 net/netlink/af_netlink.c:1612 but this lock was taken by another, SOFTIRQ-safe lock in the past: (&local->queue_stop_reason_lock){..-.}-{2:2}

and interrupts could create inverse lock ordering between them.

other info that might help us debug this: Possible interrupt unsafe locking scenario:

   CPU0                    CPU1
   ----                    ----

lock(nl_table_lock); local_irq_disable(); lock(&local->queue_stop_reason_lock); lock(nl_table_lock); lock(&local->queue_stop_reason_lock);

*** DEADLOCK ***

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2023-53731"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-10-22T14:15:48Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetlink: fix potential deadlock in netlink_set_err()\n\nsyzbot reported a possible deadlock in netlink_set_err() [1]\n\nA similar issue was fixed in commit 1d482e666b8e (\"netlink: disable IRQs\nfor netlink_lock_table()\") in netlink_lock_table()\n\nThis patch adds IRQ safety to netlink_set_err() and __netlink_diag_dump()\nwhich were not covered by cited commit.\n\n[1]\n\nWARNING: possible irq lock inversion dependency detected\n6.4.0-rc6-syzkaller-00240-g4e9f0ec38852 #0 Not tainted\n\nsyz-executor.2/23011 just changed the state of lock:\nffffffff8e1a7a58 (nl_table_lock){.+.?}-{2:2}, at: netlink_set_err+0x2e/0x3a0 net/netlink/af_netlink.c:1612\nbut this lock was taken by another, SOFTIRQ-safe lock in the past:\n (\u0026local-\u003equeue_stop_reason_lock){..-.}-{2:2}\n\nand interrupts could create inverse lock ordering between them.\n\nother info that might help us debug this:\n Possible interrupt unsafe locking scenario:\n\n       CPU0                    CPU1\n       ----                    ----\n  lock(nl_table_lock);\n                               local_irq_disable();\n                               lock(\u0026local-\u003equeue_stop_reason_lock);\n                               lock(nl_table_lock);\n  \u003cInterrupt\u003e\n    lock(\u0026local-\u003equeue_stop_reason_lock);\n\n *** DEADLOCK ***",
  "id": "GHSA-cj8f-58h8-h475",
  "modified": "2025-10-22T15:31:12Z",
  "published": "2025-10-22T15:31:12Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-53731"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/1556ba034b95cfd4f75ea93c1a2679ae0444bba1"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/4b9adb8d4a62ff7608d4a7d4eb42036a88f30980"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/61ffe8b1ee084e5c82a4e4bbf9e7b68e0c06e464"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/8d61f926d42045961e6b65191c09e3678d86a9cf"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/8f6652ed2ad98fe6d13b903483d9257762ab2ec6"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/a641240b7e071c5538dc0e7894ece833fce459dd"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/c09e8e3f7fd432984bf5422302b093d2371dfc48"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/cde7b90e0539a3b11da377e463dfd2288a162dbf"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/eb8e27c8fa9397b4a7b181c48fa58157dbe9902e"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

RHSA-2024:9315

Vulnerability from csaf_redhat - Published: 2024-11-12 09:11 - Updated: 2026-09-13 08:43

Summary

Red Hat Security Advisory: kernel security update

Severity

Moderate

Scope

594 vulnerabilities in this advisory, including CVE-2023-53731.

CVE-2023-53731

A flaw was found in the Linux kernel. A local attacker with low privileges could exploit a timing issue, specifically a potential deadlock in the Netlink communication subsystem. This could cause the system to become unresponsive, leading to a Denial of Service (DoS).

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Fixed: 280 products Known not affected: 8 products

https://access.redhat.com/errata/RHSA-2024:9315

Open the full advisory

SUSE-SU-2025:21040-1

Vulnerability from csaf_suse - Published: 2025-11-13 15:32 - Updated: 2025-11-13 15:32

Summary

Security update for the Linux Kernel

Severity

Important

Scope

191 vulnerabilities in this advisory, including CVE-2023-53731.

CVE-2023-53731

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 11 products

Open the full advisory

SUSE-SU-2025:21052-1

Vulnerability from csaf_suse - Published: 2025-11-25 18:51 - Updated: 2025-11-25 18:51

Summary

Security update for the Linux Kernel

Severity

Important

Scope

191 vulnerabilities in this advisory, including CVE-2023-53731.

CVE-2023-53731

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 4 products

Open the full advisory

SUSE-SU-2025:21056-1

Vulnerability from csaf_suse - Published: 2025-11-13 14:22 - Updated: 2025-11-13 14:22

Summary

Security update for the Linux Kernel

Severity

Important

Scope

191 vulnerabilities in this advisory, including CVE-2023-53731.

CVE-2023-53731

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 17 products

Open the full advisory

SUSE-SU-2025:21064-1

Vulnerability from csaf_suse - Published: 2025-11-25 16:39 - Updated: 2025-11-25 16:39

Summary

Security update for the Linux Kernel

Severity

Important

Scope

191 vulnerabilities in this advisory, including CVE-2023-53731.

CVE-2023-53731

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 7 products

Open the full advisory

SUSE-SU-2025:4057-1

Vulnerability from csaf_suse - Published: 2025-11-11 18:36 - Updated: 2025-11-11 18:36

Summary

Security update for the Linux Kernel

Severity

Important

Scope

462 vulnerabilities in this advisory, including CVE-2023-53731.

CVE-2023-53731

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 56 products

Open the full advisory

SUSE-SU-2025:4128-1

Vulnerability from csaf_suse - Published: 2025-11-18 13:51 - Updated: 2025-11-18 13:51

Summary

Security update for the Linux Kernel

Severity

Important

Scope

189 vulnerabilities in this advisory, including CVE-2023-53731.

CVE-2023-53731

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 33 products

Open the full advisory

SUSE-SU-2025:4132-1

Vulnerability from csaf_suse - Published: 2025-11-18 16:45 - Updated: 2025-11-18 16:45

Summary

Security update for the Linux Kernel

Severity

Important

Scope

462 vulnerabilities in this advisory, including CVE-2023-53731.

CVE-2023-53731

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 8 products

Open the full advisory

SUSE-SU-2025:4140-1

Vulnerability from csaf_suse - Published: 2025-11-19 13:15 - Updated: 2025-11-19 13:15

Summary

Security update for the Linux Kernel

Severity

Important

Scope

190 vulnerabilities in this advisory, including CVE-2023-53731.

CVE-2023-53731

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 174 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2023-53731 (GCVE-0-2023-53731)

Tags

Sightings

Nomenclature

Related by attack behaviour