CVE-2023-54306: net: tls: avoid hanging tasks on the tx_lock
In the Linux kernel, the following vulnerability has been resolved:
net: tls: avoid hanging tasks on the txlock
syzbot sent a hung task report and Eric explains that adversarial receiver may keep RWIN at 0 for a long time, so we are not guaranteed to make forward progress. Thread which took txlock and went to sleep may not release txlock for hours. Use interruptible sleep where possible and reschedule the work if it can't take the lock.
Testing: existing selftest passes
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-54306?
CVE-2023-54306 has been classified with a sufficient severity level due to its potential to cause hung tasks in the Linux kernel.
How do I fix CVE-2023-54306?
To mitigate CVE-2023-54306, update your Linux kernel to the latest stable version where this vulnerability has been resolved.
What systems are affected by CVE-2023-54306?
CVE-2023-54306 primarily affects the Linux kernel and associated systems running versions containing the vulnerability.
What impact does CVE-2023-54306 have on system performance?
CVE-2023-54306 can lead to performance degradation by causing tasks to hang, preventing forward progress in network communications.
Is CVE-2023-54306 being actively exploited?
As of now, there is no public indication that CVE-2023-54306 is being actively exploited in the wild.