CVE-2023-53731: netlink: fix potential deadlock in netlink_set_err()

Published Oct 22, 2025
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

netlink: fix potential deadlock in netlinkseterr()

syzbot reported a possible deadlock in netlinkseterr() [1]

A similar issue was fixed in commit 1d482e666b8e ("netlink: disable IRQs for netlinklocktable()") in netlinklocktable()

This patch adds IRQ safety to netlinkseterr() and netlinkdiagdump() which were not covered by cited commit.

[1]

WARNING: possible irq lock inversion dependency detected 6.4.0-rc6-syzkaller-00240-g4e9f0ec38852 #0 Not tainted

syz-executor.2/23011 just changed the state of lock: ffffffff8e1a7a58 (nltablelock){.+.?}-{2:2}, at: netlinkseterr+0x2e/0x3a0 net/netlink/afnetlink.c:1612 but this lock was taken by another, SOFTIRQ-safe lock in the past: (&local->queuestopreasonlock){..-.}-{2:2}

and interrupts could create inverse lock ordering between them.

other info that might help us debug this: Possible interrupt unsafe locking scenario:

CPU0 CPU1 ---- ---- lock(nltablelock); localirqdisable(); lock(&local->queuestopreasonlock); lock(nltablelock); <Interrupt> lock(&local->queuestopreasonlock);

DEADLOCK

Affected Software

1 affected component
Linux Linux kernel

Event History

Oct 22, 2025
CVE Published
via MITRE·01:23 PM
Data Sourced
via MITRE·01:23 PM
Description
Data Sourced
via NVD·02:15 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2023-53731?

CVE-2023-53731 is considered a moderate severity vulnerability due to its potential to cause deadlocks.

2

How do I fix CVE-2023-53731?

To fix CVE-2023-53731, update the Linux kernel to the latest version where the vulnerability has been resolved.

3

What systems are affected by CVE-2023-53731?

CVE-2023-53731 affects numerous distributions of the Linux kernel that utilize the netlink functionality.

4

What are the potential consequences of CVE-2023-53731?

The potential consequences of CVE-2023-53731 include system hangs and denial of service due to deadlock scenarios.

5

Is CVE-2023-53731 exploitability likely?

The exploitability of CVE-2023-53731 is considered low in normal operational conditions but remains a concern in specific high-traffic environments.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203