Unknown

CVE-2023-53731 — netlink: fix potential deadlock in netlink_set_err()

In the Linux kernel, the following vulnerability has been resolved: netlink: fix potential deadlock in netlink_set_err() syzbot reported a possible deadlock in netlink_set_err() [1] A similar issue was fixed in commit 1d482e666b8e ("netlink: disable IRQs for netlink_lock_table()") in netlink_lock_table() This patch adds IRQ safety to netlink_set_err() and __netlink_diag_dump() which were not covered by cited commit. [1] WARNING: possible irq lock inversion dependency detected 6.4.0-rc6-syzkaller-00240-g4e9f0ec38852 #0 Not tainted syz-executor.2/23011 just changed the state of lock: ffffffff8e1a7a58 (nl_table_lock){.+.?}-{2:2}, at: netlink_set_err+0x2e/0x3a0 net/netlink/af_netlink.c:1612 but this lock was taken by another, SOFTIRQ-safe lock in the past: (&local->queue_stop_reason_lock){..-.}-{2:2} and interrupts could create inverse lock ordering between them. other info that might help us debug this: Possible interrupt unsafe locking scenario: CPU0 CPU1 ---- ---- lock(nl_table_lock); local_irq_disable(); lock(&local->queue_stop_reason_lock); lock(nl_table_lock); <Interrupt> lock(&local->queue_stop_reason_lock); *** DEADLOCK ***

Published Oct 22, 2025 · Updated Oct 13, 2026 · Sources: NIST National Vulnerability Database, CVE Program (cve.org) e CISA ADP · CNA: Linux

Low

Who exploits it and how urgent it is

A 0–100 score combining confirmed exploitation, ransomware and APT use, public exploits, EPSS and severity.

No exploitation signal in the sources consulted so far.

How the score was calculated

EPSS 0.2% (30-day exploitation probability)+2

The score orders the patch queue; it does not replace your asset context (internet exposure, criticality, compensating controls).

Triage

Is it exploited, how likely is exploitation, what does it touch, and how severe do the sources call it.

Exploitation

Not confirmed

Not in CISA KEV — an absence of record, not proof it is unexploited.

EPSS FIRST

0.23%

ahead of 13% of scored CVEs · Oct 15, 2026

Affects

Linux

CVSS base

—

Score not published yet.

Remediation

Fixes and mitigations documented by the sources — linked to the original advisory.

No fix documented by the sources we poll. That does not mean none exists: check the vendor advisory.

First 24 hours

Ordered from the record’s own fields — exposure first, because you cannot patch what you have not found. A rule-generated starting point.

Identify exposed assets running the affected vendor/product/version combinations (Linux Linux).
No fix documented in the sources: reduce exposure and monitor the vendor advisory.
Search available logs for exploit probes, errors and authentication anomalies.

Affected scope

Vendor, product and versions as the sources word them.

Vendor	Product	Versions	Status	Source
Linux	Linux	version a8e9111a8625dd11e70edd61f7a1ccd26c041442version 5.13≥ 5.12.11 and < 5.13≥ 4.9.273 and < 4.10≥ 4.4.273 and < 4.5≥ 5.10.44 and < 5.10.188≥ 5.4.126 and < 5.4.251≥ 4.19.195 and < 4.19.291 and 12 more ≥ 4.14.237 and < 4.14.322version 76cc8e04f38c2bbfcba07f62864a011f142bd40c≥ 82b2ea5f904b3826934df4a00f3b8806272185f6 and < c09e8e3f7fd432984bf5422302b093d2371dfc48version 5f155c4046200f067b1dc3140ea99ef56e4e0b74≥ 1d482e666b8e74c7555dbdfbfb77205eeed3ff2d and < 8d61f926d42045961e6b65191c09e3678d86a9cf≥ 1d482e666b8e74c7555dbdfbfb77205eeed3ff2d and < 1556ba034b95cfd4f75ea93c1a2679ae0444bba1≥ 1d482e666b8e74c7555dbdfbfb77205eeed3ff2d and < eb8e27c8fa9397b4a7b181c48fa58157dbe9902e≥ 1d482e666b8e74c7555dbdfbfb77205eeed3ff2d and < 61ffe8b1ee084e5c82a4e4bbf9e7b68e0c06e464≥ 1d482e666b8e74c7555dbdfbfb77205eeed3ff2d and < a641240b7e071c5538dc0e7894ece833fce459dd≥ 1d6d43d4805da9b3fa0f5841e8b1083c89868f35 and < cde7b90e0539a3b11da377e463dfd2288a162dbf≥ 21df0c2e7d195de4a3c650de9361b3037fa6c59a and < 8f6652ed2ad98fe6d13b903483d9257762ab2ec6≥ 59fba11d649854134c75ad88c8adafa9304ac419 and < 4b9adb8d4a62ff7608d4a7d4eb42036a88f30980	Vulnerable	CVE Program (cve.org) e CISA ADP

EPSS over time FIRST

Oct 13, 2026 → Oct 15, 2026 · 3 reading(s) · max 0.23%

Detection

Read off the CVSS vector and the weakness class. Starting points, not tested rules.

Not enough vector or weakness data: use the affected application’s logs as a starting point.

application logs

Timeline

What happened to this CVE, newest first.

2026
Record published
Oct 13, 2026
Affected products added · linux/linux
Oct 13, 2026 · CVE Program (cve.org) e CISA ADP
Source status changed · → Deferred
Oct 13, 2026 · NIST National Vulnerability Database
Record created in this database
Oct 13, 2026 · NIST National Vulnerability Database
2025
CVE published
Oct 22, 2025 · Linux

Source activity

Repeated readings are counted rather than listed.

1× Official description updated · Oct 13, 2026 – Oct 13, 2026

References

9 on the record

git.kernel.org/stable/c/eb8e27c8fa9397b4a7b181c48fa58157dbe9902e
NIST National Vulnerability Database
git.kernel.org/stable/c/8f6652ed2ad98fe6d13b903483d9257762ab2ec6
NIST National Vulnerability Database
git.kernel.org/stable/c/8d61f926d42045961e6b65191c09e3678d86a9cf
NIST National Vulnerability Database
git.kernel.org/stable/c/61ffe8b1ee084e5c82a4e4bbf9e7b68e0c06e464
NIST National Vulnerability Database
git.kernel.org/stable/c/4b9adb8d4a62ff7608d4a7d4eb42036a88f30980
NIST National Vulnerability Database
git.kernel.org/stable/c/c09e8e3f7fd432984bf5422302b093d2371dfc48
NIST National Vulnerability Database
git.kernel.org/stable/c/a641240b7e071c5538dc0e7894ece833fce459dd
NIST National Vulnerability Database
git.kernel.org/stable/c/1556ba034b95cfd4f75ea93c1a2679ae0444bba1
NIST National Vulnerability Database
git.kernel.org/stable/c/cde7b90e0539a3b11da377e463dfd2288a162dbf
NIST National Vulnerability Database

Elsewhere on this site

Linux
every CVE for this vendor

Related CVEs (same products)

Critical CVE-2026-99999 ipv4: validate checksum_start before completing checksum 16h
Unknown CVE-2026-98432 ipv4: free inet_opt and ireq_opt after an RCU grace period 16h
Unknown CVE-2026-98431 RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency 1d
Unknown CVE-2026-98430 RDMA/efa: Keep admin queues alive while IRQ is registered 1d
Unknown CVE-2026-98429 RDMA/efa: Keep EQ resources alive while IRQ is registered 1d
Unknown CVE-2026-98428 ALSA: usb: 6fire: Avoid embedded URBs 1d

Not in any source we poll

Listed rather than left blank: an empty field and an unmeasured one look identical on screen, and only one is a reason to look elsewhere.

No CVSS score published by NVD, the CNA, CISA or GitHub so far.
No fixed version, patch or mitigation documented.
No CISA SSVC assessment.
No CWE classification.
No confirmed IOCs, IP addresses, domains, file hashes, or malware artifacts supplied.
No organization-specific asset inventory, compensating-control status, or patch deployment evidence supplied.
No exploit packet captures, log samples, or incident case IDs supplied.

Answered from this record

Text assembled only from the fields above — no additional claims.

What should defenders know first?

CVE-2023-53731 is "netlink: fix potential deadlock in netlink_set_err()", rated Unknown. It affects Linux (Linux); versions are in the scope table. It is not in CISA KEV, which does not rule out exploitation. EPSS 0.23% estimates the probability of exploitation in 30 days; neither replaces your asset context. First verify whether exposed or business-critical assets run the affected versions, apply vendor fixes or mitigations, and preserve logs for review.

Comments

Moderated technical discussion. Read the community guidelines.

No comments yet.