sfc: fix crash when reading stats while NIC is resetting

MITRE NVD CVE.ORG JSON API

Summary

CVECVE-2023-54156
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2025-12-24 13:16:17 UTC
Updated2026-10-15 22:17:53 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: sfc: fix crash when reading stats while NIC is resetting efx_net_stats() (.ndo_get_stats64) can be called during an ethtool selftest, during which time nic_data->mc_stats is NULL as the NIC has been fini'd. In this case do not attempt to fetch the latest stats from the hardware, else we will crash on a NULL dereference: BUG: kernel NULL pointer dereference, address: 0000000000000038 RIP efx_nic_update_stats abridged calltrace: efx_ef10_update_stats_pf efx_net_stats dev_get_stats dev_seq_printf_stats Skipping the read is safe, we will simply give out stale stats. To ensure that the free in efx_ef10_fini_nic() does not race against efx_ef10_update_stats_pf(), which could cause a TOCTTOU bug, take the efx->stats_lock in fini_nic (it is already held across update_stats).

Risk And Classification

Primary CVSS: v3.1 7.8 HIGH from 416baaa9-dc9f-4396-8d5f-8c081fb06d67

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.001830000 probability, percentile 0.080540000 (date 2026-08-06)

VersionSourceTypeScoreSeverityVector
3.1416baaa9-dc9f-4396-8d5f-8c081fb06d67Secondary7.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
3.1CNADECLARED7.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 Breakdown

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected d3142c193dca9a2f6878f4128ce1aaf221bb3f99 cb1aa7cc562cab6a87ea33574c8c65f2d2fd7aeb git Not specified
CNA Linux Linux affected d3142c193dca9a2f6878f4128ce1aaf221bb3f99 91f4ef204e731565afdc6c2a7fcf509a3fd6fd67 git Not specified
CNA Linux Linux affected d3142c193dca9a2f6878f4128ce1aaf221bb3f99 446f5567934331923d0aec4ce045e4ecb0174aae git Not specified
CNA Linux Linux affected d3142c193dca9a2f6878f4128ce1aaf221bb3f99 470152d76b3ed107d172ea46acc4bfa941f20b4b git Not specified
CNA Linux Linux affected d3142c193dca9a2f6878f4128ce1aaf221bb3f99 aba32b4c58112960c0c708703ca6b44dc8944082 git Not specified
CNA Linux Linux affected d3142c193dca9a2f6878f4128ce1aaf221bb3f99 d1b355438b8325a486f087e506d412c4e852f37b git Not specified
CNA Linux Linux affected 5.9 Not specified
CNA Linux Linux unaffected 5.9 semver Not specified
CNA Linux Linux unaffected 5.10.188 5.10.* semver Not specified
CNA Linux Linux unaffected 5.15.121 5.15.* semver Not specified
CNA Linux Linux unaffected 6.1.39 6.1.* semver Not specified
CNA Linux Linux unaffected 6.3.13 6.3.* semver Not specified
CNA Linux Linux unaffected 6.4.4 6.4.* semver Not specified
CNA Linux Linux unaffected 6.5 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/d1b355438b8325a486f087e506d412c4e852f37b 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/446f5567934331923d0aec4ce045e4ecb0174aae 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/91f4ef204e731565afdc6c2a7fcf509a3fd6fd67 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/aba32b4c58112960c0c708703ca6b44dc8944082 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/cb1aa7cc562cab6a87ea33574c8c65f2d2fd7aeb 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/470152d76b3ed107d172ea46acc4bfa941f20b4b 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report