CVE-2023-54156
- Source
- https://cve.org/CVERecord?id=CVE-2023-54156
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-54156.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2023-54156
- Downstream
- Related
- Published
- 2025-12-24T13:07:06.043Z
- Modified
- 2026-03-31T17:29:20.685134Z
- Summary
- sfc: fix crash when reading stats while NIC is resetting
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
sfc: fix crash when reading stats while NIC is resetting
efxnetstats() (.ndogetstats64) can be called during an ethtool selftest, during which time nicdata->mcstats is NULL as the NIC has been fini'd. In this case do not attempt to fetch the latest stats from the hardware, else we will crash on a NULL dereference: BUG: kernel NULL pointer dereference, address: 0000000000000038 RIP efxnicupdatestats abridged calltrace: efxef10updatestatspf efxnetstats devgetstats devseqprintfstats Skipping the read is safe, we will simply give out stale stats. To ensure that the free in efxef10fininic() does not race against efxef10updatestatspf(), which could cause a TOCTTOU bug, take the efx->statslock in fininic (it is already held across updatestats).
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54156.json" }- References
-
- https://git.kernel.org/stable/c/446f5567934331923d0aec4ce045e4ecb0174aae
- https://git.kernel.org/stable/c/470152d76b3ed107d172ea46acc4bfa941f20b4b
- https://git.kernel.org/stable/c/91f4ef204e731565afdc6c2a7fcf509a3fd6fd67
- https://git.kernel.org/stable/c/aba32b4c58112960c0c708703ca6b44dc8944082
- https://git.kernel.org/stable/c/cb1aa7cc562cab6a87ea33574c8c65f2d2fd7aeb
- https://git.kernel.org/stable/c/d1b355438b8325a486f087e506d412c4e852f37b
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54156.json
- https://nvd.nist.gov/vuln/detail/CVE-2023-54156
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedd3142c193dca9a2f6878f4128ce1aaf221bb3f99Fixedcb1aa7cc562cab6a87ea33574c8c65f2d2fd7aebFixed91f4ef204e731565afdc6c2a7fcf509a3fd6fd67Fixed446f5567934331923d0aec4ce045e4ecb0174aaeFixed470152d76b3ed107d172ea46acc4bfa941f20b4bFixedaba32b4c58112960c0c708703ca6b44dc8944082Fixedd1b355438b8325a486f087e506d412c4e852f37b