CVE-2026-53323: net: dsa: remove redundant netdev_lock_ops() from conduit ethtool ops
In the Linux kernel, the following vulnerability has been resolved:
net: dsa: remove redundant netdevlockops() from conduit ethtool ops
DSA replaces the conduit (master) device's ethtoolops with its own wrappers that aggregate stats from both the conduit and DSA switch ports. Taking the lock again inside the DSA wrappers causes a deadlock.
Stumbled upon this when booting qemu with fbnic and CONFIGNETDSALOOP=y (which looks like some kind of testing device that auto-populates the ports of eth0). ethtool -i is enough to deadlock. This means we have basically zero coverage for DSA stuff with real ops locked devs.
Remove the redundant netdevlockops()/netdevunlockops() calls from the DSA conduit ethtool wrappers.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53323?
The severity of CVE-2026-53323 is medium with a CVSS score of 5.5.
How do I fix CVE-2026-53323?
To fix CVE-2026-53323, apply the available patch from the Linux Kernel source.
What software is affected by CVE-2026-53323?
The vulnerability CVE-2026-53323 affects the Linux kernel.
What impact does CVE-2026-53323 have on my system?
CVE-2026-53323 could potentially lead to denial of service due to a high vulnerability level.
When was CVE-2026-53323 published?
CVE-2026-53323 was published on June 26, 2026.