CVE-2023-54306

net: tls: avoid hanging tasks on the tx_lock

State: Published
Severity: 7.5 High
Published: Dec 30, 2025
Updated: Oct 15, 2026
Reserved: Dec 30, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

net: tls: avoid hanging tasks on the tx_lock

syzbot sent a hung task report and Eric explains that adversarial receiver may keep RWIN at 0 for a long time, so we are not guaranteed to make forward progress. Thread which took tx_lock and went to sleep may not release tx_lock for hours. Use interruptible sleep where possible and reschedule the work if it can't take the lock.

Testing: existing selftest passes

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	79ffe6087e9145d2377385cac48d0d6a6b4225a5 to before bde541a57b4204d0a800afbbd3d1c06c9cdb133fAffected 79ffe6087e9145d2377385cac48d0d6a6b4225a5 to before 7123a4337bf73132bbfb5437e4dc83ba864a9a1eAffected 79ffe6087e9145d2377385cac48d0d6a6b4225a5 to before be5d5d0637fd88c18ee76024bdb22649a1de00d6Affected 79ffe6087e9145d2377385cac48d0d6a6b4225a5 to before 1f800f6aae57d2d8f63d32fff383017cbc11cf65Affected 79ffe6087e9145d2377385cac48d0d6a6b4225a5 to before ccf1ccdc5926907befbe880b562b2a4b5f44c087Affected 79ffe6087e9145d2377385cac48d0d6a6b4225a5 to before f3221361dc85d4de22586ce8441ec2c67b454f5dAffected c8d6817345f4ba228d07380e571676405e112872Affected 5.3.11 to before 5.4Affected
LinuxLinux	5.4Affected before 5.4Not affected 5.4.235 through 5.4.Not affected 5.10.173 through 5.10.Not affected 5.15.100 through 5.15.Not affected 6.1.18 through 6.1.Not affected 6.2.5 through 6.2.*Not affected 6.3 and laterNot affected

Product

Versions

LinuxLinux

79ffe6087e9145d2377385cac48d0d6a6b4225a5 to before bde541a57b4204d0a800afbbd3d1c06c9cdb133fAffected
79ffe6087e9145d2377385cac48d0d6a6b4225a5 to before 7123a4337bf73132bbfb5437e4dc83ba864a9a1eAffected
79ffe6087e9145d2377385cac48d0d6a6b4225a5 to before be5d5d0637fd88c18ee76024bdb22649a1de00d6Affected
79ffe6087e9145d2377385cac48d0d6a6b4225a5 to before 1f800f6aae57d2d8f63d32fff383017cbc11cf65Affected
79ffe6087e9145d2377385cac48d0d6a6b4225a5 to before ccf1ccdc5926907befbe880b562b2a4b5f44c087Affected
79ffe6087e9145d2377385cac48d0d6a6b4225a5 to before f3221361dc85d4de22586ce8441ec2c67b454f5dAffected
c8d6817345f4ba228d07380e571676405e112872Affected
5.3.11 to before 5.4Affected

LinuxLinux

5.4Affected
before 5.4Not affected
5.4.235 through 5.4.*Not affected
5.10.173 through 5.10.*Not affected
5.15.100 through 5.15.*Not affected
6.1.18 through 6.1.*Not affected
6.2.5 through 6.2.*Not affected
6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.