---
id: CVE-2023-54156
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  sfc: fix crash when reading stats while NIC is resetting

  efx_net_stats() (.ndo_get_stats64) can be called during an ethtool
   selftest, during which time nic_data->mc_s…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  sfc: fix crash when reading stats while NIC is resetting

  efx_net_stats() (.ndo_get_stats64) can be called during an ethtool
   selftest, during which time nic_data->mc_s…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-476
vendor: Red Hat
product: Red Hat Enterprise Linux BaseOS (v. 9)
affected:
  - enterprise_linux 8
  - enterprise_linux 9
  - enterprise_linux_appstream_v_9
  - enterprise_linux_baseos_v_9
  - enterprise_linux_crb_v_9
  - enterprise_linux_nfv_v_9
  - enterprise_linux_rt_v_9
patched:
  - enterprise_linux_appstream_v_9
  - enterprise_linux_baseos_v_9
  - enterprise_linux_crb_v_9
  - enterprise_linux_nfv_v_9
  - enterprise_linux_rt_v_9
published: '2025-12-24'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T22:17:53.783'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2023-54156'
references:
  - url: 'https://git.kernel.org/stable/c/446f5567934331923d0aec4ce045e4ecb0174aae'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/470152d76b3ed107d172ea46acc4bfa941f20b4b'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/91f4ef204e731565afdc6c2a7fcf509a3fd6fd67'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/aba32b4c58112960c0c708703ca6b44dc8944082'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/cb1aa7cc562cab6a87ea33574c8c65f2d2fd7aeb'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/d1b355438b8325a486f087e506d412c4e852f37b'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-54156.json
  - url: 'https://access.redhat.com/security/cve/CVE-2023-54156'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2425100'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2023-54156'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2023-54156'
  - url: >-
      https://lore.kernel.org/linux-cve-announce/2025122428-CVE-2023-54156-832a@gregkh/T
  - url: 'https://access.redhat.com/errata/RHSA-2024:2394'
tags:
  - nvd
  - csaf
  - vex
  - red-hat
  - cve.org
epss: 0.0022
epssPercentile: 0.12416
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-15T21:38:46.222485Z'
scores:
  nvd: 7.8
  vendor: 6.4
  cna: 7.8
ingestedAt: '2026-10-15T22:48:25.431Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

sfc: fix crash when reading stats while NIC is resetting

efx_net_stats() (.ndo_get_stats64) can be called during an ethtool
 selftest, during which time nic_data->mc_stats is NULL as the NIC has
 been fini'd.  In this case do not attempt to fetch the latest stats
 from the hardware, else we will crash on a NULL dereference:
    BUG: kernel NULL pointer dereference, address: 0000000000000038
    RIP efx_nic_update_stats
    abridged calltrace:
    efx_ef10_update_stats_pf
    efx_net_stats
    dev_get_stats
    dev_seq_printf_stats
Skipping the read is safe, we will simply give out stale stats.
To ensure that the free in efx_ef10_fini_nic() does not race against
 efx_ef10_update_stats_pf(), which could cause a TOCTTOU bug, take the
 efx->stats_lock in fini_nic (it is already held across update_stats).

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Vendor advisories

- **RHSA-2024:2394** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9), Red Hat Enterprise Linux CRB (v. 9), Red Hat Enterprise Linux NFV (v. 9), Red Hat Enterprise Linux RT (v. 9) · released 2024-04-30 · [advisory](https://access.redhat.com/errata/RHSA-2024:2394)
- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 · updated 2026-10-16 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-54156.json)