CVE-2023-54306

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
30/12/2025
Last modified:
30/12/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> net: tls: avoid hanging tasks on the tx_lock<br /> <br /> syzbot sent a hung task report and Eric explains that adversarial<br /> receiver may keep RWIN at 0 for a long time, so we are not guaranteed<br /> to make forward progress. Thread which took tx_lock and went to sleep<br /> may not release tx_lock for hours. Use interruptible sleep where<br /> possible and reschedule the work if it can&amp;#39;t take the lock.<br /> <br /> Testing: existing selftest passes

Impact