CVE-2023-54156sfc: fix crash when reading stats while NIC is resetting
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: sfc: fix crash when reading stats while NIC is resetting efx_net_stats() (.ndo_get_stats64) can be called during an ethtool selftest, during which time nic_data->mc_stats is NULL as the NIC has been fini'd. In this case do not attempt to fetch the latest stats from the hardware, else we will crash on a NULL dereference: BUG: kernel NULL pointer dereference, address: 0000000000000038 RIP efx_nic_update_stats abridged calltrace: efx_ef10_update_stats_pf efx_net_stats dev_get_stats dev_seq_printf_stats Skipping the read is safe, we will simply give out stale stats. To ensure that the free in efx_ef10_fini_nic() does not race against efx_ef10_update_stats_pf(), which could cause a TOCTTOU bug, take the efx->stats_lock in fini_nic (it is already held across update_stats).
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Deferred
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from d3142c193dca9a2f6878f4128ce1aaf221bb3f99 before cb1aa7cc562cab6a87ea33574c8c65f2d2fd7aeb; from d3142c193dca9a2f6878f4128ce1aaf221bb3f99 before 91f4ef204e731565afdc6c2a7fcf509a3fd6fd67; from d3142c193dca9a2f6878f4128ce1aaf221bb3f99 before 446f5567934331923d0aec4ce045e4ecb0174aae; from d3142c193dca9a2f6878f4128ce1aaf221bb3f99 before 470152d76b3ed107d172ea46acc4bfa941f20b4b; from d3142c193dca9a2f6878f4128ce1aaf221bb3f99 before aba32b4c58112960c0c708703ca6b44dc8944082; from d3142c193dca9a2f6878f4128ce1aaf221bb3f99 before d1b355438b8325a486f087e506d412c4e852f37b | CNA record |
References
- https://git.kernel.org/stable/c/cb1aa7cc562cab6a87ea33574c8c65f2d2fd7aeb
- https://git.kernel.org/stable/c/91f4ef204e731565afdc6c2a7fcf509a3fd6fd67
- https://git.kernel.org/stable/c/446f5567934331923d0aec4ce045e4ecb0174aae
- https://git.kernel.org/stable/c/470152d76b3ed107d172ea46acc4bfa941f20b4b
- https://git.kernel.org/stable/c/aba32b4c58112960c0c708703ca6b44dc8944082
- https://git.kernel.org/stable/c/d1b355438b8325a486f087e506d412c4e852f37b
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.