{"id":"CVE-2023-54156","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nsfc: fix crash when reading stats while NIC is resetting\n\nefx_net_stats() (.ndo_get_stats64) can be called during an ethtool\n selftest, during which time nic_data->mc_s…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nsfc: fix crash when reading stats while NIC is resetting\n\nefx_net_stats() (.ndo_get_stats64) can be called during an ethtool\n selftest, during which time nic_data->mc_s…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-476"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux BaseOS (v. 9)","affected":["enterprise_linux 8","enterprise_linux 9","enterprise_linux_appstream_v_9","enterprise_linux_baseos_v_9","enterprise_linux_crb_v_9","enterprise_linux_nfv_v_9","enterprise_linux_rt_v_9"],"patched":["enterprise_linux_appstream_v_9","enterprise_linux_baseos_v_9","enterprise_linux_crb_v_9","enterprise_linux_nfv_v_9","enterprise_linux_rt_v_9"],"published":"2025-12-24","updated":"2026-10-15","sourceUpdated":"2026-10-15T22:17:53.783","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-54156","references":[{"url":"https://git.kernel.org/stable/c/446f5567934331923d0aec4ce045e4ecb0174aae","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/470152d76b3ed107d172ea46acc4bfa941f20b4b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/91f4ef204e731565afdc6c2a7fcf509a3fd6fd67","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/aba32b4c58112960c0c708703ca6b44dc8944082","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/cb1aa7cc562cab6a87ea33574c8c65f2d2fd7aeb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/d1b355438b8325a486f087e506d412c4e852f37b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-54156.json"},{"url":"https://access.redhat.com/security/cve/CVE-2023-54156"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2425100"},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-54156"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-54156"},{"url":"https://lore.kernel.org/linux-cve-announce/2025122428-CVE-2023-54156-832a@gregkh/T"},{"url":"https://access.redhat.com/errata/RHSA-2024:2394"}],"tags":["nvd","csaf","vex","red-hat","cve.org"],"epss":0.0022,"epssPercentile":0.12416,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-15T21:38:46.222485Z"},"scores":{"nvd":7.8,"vendor":6.4,"cna":7.8},"ingestedAt":"2026-10-15T22:48:25.431Z","slug":"CVE-2023-54156","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsfc: fix crash when reading stats while NIC is resetting\n\nefx_net_stats() (.ndo_get_stats64) can be called during an ethtool\n selftest, during which time nic_data->mc_stats is NULL as the NIC has\n been fini'd.  In this case do not attempt to fetch the latest stats\n from the hardware, else we will crash on a NULL dereference:\n    BUG: kernel NULL pointer dereference, address: 0000000000000038\n    RIP efx_nic_update_stats\n    abridged calltrace:\n    efx_ef10_update_stats_pf\n    efx_net_stats\n    dev_get_stats\n    dev_seq_printf_stats\nSkipping the read is safe, we will simply give out stale stats.\nTo ensure that the free in efx_ef10_fini_nic() does not race against\n efx_ef10_update_stats_pf(), which could cause a TOCTTOU bug, take the\n efx->stats_lock in fini_nic (it is already held across update_stats).\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **RHSA-2024:2394** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9), Red Hat Enterprise Linux CRB (v. 9), Red Hat Enterprise Linux NFV (v. 9), Red Hat Enterprise Linux RT (v. 9) · released 2024-04-30 · [advisory](https://access.redhat.com/errata/RHSA-2024:2394)\n- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · updated 2026-10-16 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-54156.json)","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":230097,"id":"CVE-2023-54156","ts":1793124789496,"field":"cvss","old":"6.4","new":"7.8"},{"seq":230096,"id":"CVE-2023-54156","ts":1793124789496,"field":"severity","old":"medium","new":"high"},{"seq":223743,"id":"CVE-2023-54156","ts":1792238383707,"field":"cvss","old":"7.8","new":"6.4"},{"seq":223742,"id":"CVE-2023-54156","ts":1792238383707,"field":"severity","old":"high","new":"medium"}]}