CVE-2023-53022
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Summary
CVE-2023-53022: A vulnerability was discovered in the Linux kernel that could lead to a deadlock in the enetic driver's enetic_tx_onestep_tstamp() function. This issue occurs when the netif_tx_lock() is held during an interrupt, allowing the NET_TX softirq to take the lock a second time and cause a deadlock. The vulnerable function runs in process context with softirqs enabled, increasing the likelihood of this occurrence. To mitigate this risk, it is recommended to use netif_tx_lock_bh() instead, which blocks softirqs from running and prevents the deadlock from happening.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX