{
  "cveId": "CVE-2023-53022",
  "url": "https://patchblox.com/security/cve/CVE-2023-53022",
  "summary": "CVE-2023-53022 is fixed in linux on 1 platform, first by DEBIAN-CVE-2023-53022, released March 27, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: enetc: avoid deadlock in enetc_tx_onestep_t...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  net: enetc: avoid deadlock in enetc_tx_onestep_tstamp()  This lockdep splat says it better than I could:  ================================ WARNING: inconsistent lock state 6.2.0-rc2-07010-ga9b9500ffaac-dirty #967 Not tainted -------------------------------- inconsistent {IN-SOFTIRQ-W} -\u003E {SOFTIRQ-ON-W} usage. kworker/1:3/179 [HC0[0]:SC0[0]:HE1:SE1] takes: ffff3ec4036ce098 (_xmit_ETHER#2){\u002B.?.}-{3:3}, at: netif_freeze_queues\u002B0x5c/0xc0 {IN-SOFTIRQ-W} state was registered at:   _raw_spin_lock\u002B0x5c/0xc0   sch_direct_xmit\u002B0x148/0x37c   __dev_queue_xmit\u002B0x528/0x111c   ip6_finish_output2\u002B0x5ec/0xb7c   ip6_finish_output\u002B0x240/0x3f0   ip6_output\u002B0x78/0x360   ndisc_send_skb\u002B0x33c/0x85c   ndisc_send_rs\u002B0x54/0x12c   addrconf_rs_timer\u002B0x154/0x260   call_timer_fn\u002B0xb8/0x3a0   __run_timers.part.0\u002B0x214/0x26c   run_timer_softirq\u002B0x3c/0x74   __do_softirq\u002B0x14c/0x5d8   ____do_softirq\u002B0x10/0x20   call_on_irq_stack\u002B0x2c/0x5c   do_softirq_own_stack\u002B0x1c/0x30   __irq_exit_rcu\u002B0x168/0x1a0   irq_exit_rcu\u002B0x10/0x40   el1_interrupt\u002B0x38/0x64 irq event stamp: 7825 hardirqs last  enabled at (7825): [\u003Cffffdf1f7200cae4\u003E] exit_to_kernel_mode\u002B0x34/0x130 hardirqs last disabled at (7823): [\u003Cffffdf1f708105f0\u003E] __do_softirq\u002B0x550/0x5d8 softirqs last  enabled at (7824): [\u003Cffffdf1f7081050c\u003E] __do_softirq\u002B0x46c/0x5d8 softirqs last disabled at (7811): [\u003Cffffdf1f708166e0\u003E] ____do_softirq\u002B0x10/0x20  other info that might help us debug this:  Possible unsafe locking scenario:         CPU0        ----   lock(_xmit_ETHER#2);   \u003CInterrupt\u003E     lock(_xmit_ETHER#2);   *** DEADLOCK ***  3 locks held by kworker/1:3/179:  #0: ffff3ec400004748 ((wq_completion)events){\u002B.\u002B.}-{0:0}, at: process_one_work\u002B0x1f4/0x6c0  #1: ffff80000a0bbdc8 ((work_completion)(\u0026priv-\u003Etx_onestep_tstamp)){\u002B.\u002B.}-{0:0}, at: process_one_work\u002B0x1f4/0x6c0  #2: ffff3ec4036cd438 (\u0026dev-\u003Etx_global_lock){\u002B.\u002B.}-{3:3}, at: netif_tx_lock\u002B0x1c/0x34  Workqueue: events enetc_tx_onestep_tstamp Call trace:  print_usage_bug.part.0\u002B0x208/0x22c  mark_lock\u002B0x7f0/0x8b0  __lock_acquire\u002B0x7c4/0x1ce0  lock_acquire.part.0\u002B0xe0/0x220  lock_acquire\u002B0x68/0x84  _raw_spin_lock\u002B0x5c/0xc0  netif_freeze_queues\u002B0x5c/0xc0  netif_tx_lock\u002B0x24/0x34  enetc_tx_onestep_tstamp\u002B0x20/0x100  process_one_work\u002B0x28c/0x6c0  worker_thread\u002B0x74/0x450  kthread\u002B0x118/0x11c  but I\u0027ll say it anyway: the enetc_tx_onestep_tstamp() work item runs in process context, therefore with softirqs enabled (i.o.w., it can be interrupted by a softirq). If we hold the netif_tx_lock() when there is an interrupt, and the NET_TX softirq then gets scheduled, this will take the netif_tx_lock() a second time and deadlock the kernel.  To solve this, use netif_tx_lock_bh(), which blocks softirqs from running.",
  "published": "2025-03-27T17:15:51Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00148,
  "epssPercentile": 0.04055,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.11-1",
      "fix": "DEBIAN-CVE-2023-53022",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53022",
      "released": "2025-03-27T17:15:51Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.1.11-1",
      "fix": "DEBIAN-CVE-2023-53022",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53022",
      "released": "2025-03-27T17:15:51Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.1.11-1",
      "fix": "DEBIAN-CVE-2023-53022",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53022",
      "released": "2025-03-27T17:15:51Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T13:31:49Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}