linux: In the Linux kernel, the following vulnerability has been resolved: net: dsa: remove redundant netdev_lock_ops() fro...
CVE-2026-53323 is fixed in 19 products on 1 platform, first by ALAS2023-2026-1866, released June 22, 2026. It is not reported as exploited. Patch Radar priority: Routine.
In the Linux kernel, the following vulnerability has been resolved: net: dsa: remove redundant netdev_lock_ops() from conduit ethtool ops DSA replaces the conduit (master) device's ethtool_ops with its own wrappers that aggregate stats from both the conduit and DSA switch ports. Taking the lock again inside the DSA wrappers causes a deadlock. Stumbled upon this when booting qemu with fbnic and CONFIG_NET_DSA_LOOP=y (which looks like some kind of testing device that auto-populates the ports of eth0). `ethtool -i` is enough to deadlock. This means we have basically zero coverage for DSA stuff with real ops locked devs. Remove the redundant netdev_lock_ops()/netdev_unlock_ops() calls from the DSA conduit ethtool wrappers.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| bpftool6.18 · amzn 2023 | 1:6.18.33-63.124.amzn2023 | ALAS2023-2026-1866 | Jun 22, 2026 |
| bpftool6.18-debuginfo · amzn 2023 | 1:6.18.33-63.124.amzn2023 | ALAS2023-2026-1866 | Jun 22, 2026 |
| kernel-livepatch-6.18.33-63.124 · amzn 2023 | 1:1.0-0.amzn2023 | ALAS2023-2026-1866 | Jun 22, 2026 |
| kernel6.18 · amzn 2023 | 1:6.18.33-63.124.amzn2023 | ALAS2023-2026-1866 | Jun 22, 2026 |
| kernel6.18-debuginfo · amzn 2023 | 1:6.18.33-63.124.amzn2023 | ALAS2023-2026-1866 | Jun 22, 2026 |
| kernel6.18-debuginfo-common-aarch64 · amzn 2023 | 1:6.18.33-63.124.amzn2023 | ALAS2023-2026-1866 | Jun 22, 2026 |
| kernel6.18-debuginfo-common-x86_64 · amzn 2023 | 1:6.18.33-63.124.amzn2023 | ALAS2023-2026-1866 | Jun 22, 2026 |
| kernel6.18-devel · amzn 2023 | 1:6.18.33-63.124.amzn2023 | ALAS2023-2026-1866 | Jun 22, 2026 |
| kernel6.18-headers · amzn 2023 | 1:6.18.33-63.124.amzn2023 | ALAS2023-2026-1866 | Jun 22, 2026 |
| kernel6.18-modules-extra · amzn 2023 | 1:6.18.33-63.124.amzn2023 | ALAS2023-2026-1866 | Jun 22, 2026 |
| kernel6.18-modules-extra-common · amzn 2023 | 1:6.18.33-63.124.amzn2023 | ALAS2023-2026-1866 | Jun 22, 2026 |
| kernel6.18-tools · amzn 2023 | 1:6.18.33-63.124.amzn2023 | ALAS2023-2026-1866 | Jun 22, 2026 |
| kernel6.18-tools-debuginfo · amzn 2023 | 1:6.18.33-63.124.amzn2023 | ALAS2023-2026-1866 | Jun 22, 2026 |
| kernel6.18-tools-devel · amzn 2023 | 1:6.18.33-63.124.amzn2023 | ALAS2023-2026-1866 | Jun 22, 2026 |
| linux · Debian 14 | 7.0.10-1 | DEBIAN-CVE-2026-53323 | Jun 27, 2026 |
| perf6.18 · amzn 2023 | 1:6.18.33-63.124.amzn2023 | ALAS2023-2026-1866 | Jun 22, 2026 |
| perf6.18-debuginfo · amzn 2023 | 1:6.18.33-63.124.amzn2023 | ALAS2023-2026-1866 | Jun 22, 2026 |
| python3-perf6.18 · amzn 2023 | 1:6.18.33-63.124.amzn2023 | ALAS2023-2026-1866 | Jun 22, 2026 |
| python3-perf6.18-debuginfo · amzn 2023 | 1:6.18.33-63.124.amzn2023 | ALAS2023-2026-1866 | Jun 22, 2026 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.