{"id":"CVE-2023-54156","title":"sfc: fix crash when reading stats while NIC is resetting","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nsfc: fix crash when reading stats while NIC is resetting\n\nefx_net_stats() (.ndo_get_stats64) can be called during an ethtool\n selftest, during which time nic_data->mc_s…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","vendor":"Linux","product":"Linux","affected":["Linux >= d3142c193dca9a2f6878f4128ce1aaf221bb3f99 < cb1aa7cc562cab6a87ea33574c8c65f2d2fd7aeb","Linux >= d3142c193dca9a2f6878f4128ce1aaf221bb3f99 < 91f4ef204e731565afdc6c2a7fcf509a3fd6fd67","Linux >= d3142c193dca9a2f6878f4128ce1aaf221bb3f99 < 446f5567934331923d0aec4ce045e4ecb0174aae","Linux >= d3142c193dca9a2f6878f4128ce1aaf221bb3f99 < 470152d76b3ed107d172ea46acc4bfa941f20b4b","Linux >= d3142c193dca9a2f6878f4128ce1aaf221bb3f99 < aba32b4c58112960c0c708703ca6b44dc8944082","Linux >= d3142c193dca9a2f6878f4128ce1aaf221bb3f99 < d1b355438b8325a486f087e506d412c4e852f37b","Linux 5.9"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-15T21:38:46.222485Z"},"published":"2025-12-24","updated":"2026-10-15","sourceUpdated":"2026-10-15T21:41:40.463Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2023-54156","references":[{"url":"https://git.kernel.org/stable/c/cb1aa7cc562cab6a87ea33574c8c65f2d2fd7aeb"},{"url":"https://git.kernel.org/stable/c/91f4ef204e731565afdc6c2a7fcf509a3fd6fd67"},{"url":"https://git.kernel.org/stable/c/446f5567934331923d0aec4ce045e4ecb0174aae"},{"url":"https://git.kernel.org/stable/c/470152d76b3ed107d172ea46acc4bfa941f20b4b"},{"url":"https://git.kernel.org/stable/c/aba32b4c58112960c0c708703ca6b44dc8944082"},{"url":"https://git.kernel.org/stable/c/d1b355438b8325a486f087e506d412c4e852f37b"}],"tags":["cve.org"],"epss":0.0022,"epssPercentile":0.11592,"ingestedAt":"2026-10-15T22:48:25.431Z","slug":"CVE-2023-54156","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsfc: fix crash when reading stats while NIC is resetting\n\nefx_net_stats() (.ndo_get_stats64) can be called during an ethtool\n selftest, during which time nic_data->mc_stats is NULL as the NIC has\n been fini'd.  In this case do not attempt to fetch the latest stats\n from the hardware, else we will crash on a NULL dereference:\n    BUG: kernel NULL pointer dereference, address: 0000000000000038\n    RIP efx_nic_update_stats\n    abridged calltrace:\n    efx_ef10_update_stats_pf\n    efx_net_stats\n    dev_get_stats\n    dev_seq_printf_stats\nSkipping the read is safe, we will simply give out stale stats.\nTo ensure that the free in efx_ef10_fini_nic() does not race against\n efx_ef10_update_stats_pf(), which could cause a TOCTTOU bug, take the\n efx->stats_lock in fini_nic (it is already held across update_stats).\n\n## Affected\n\n- `Linux >= d3142c193dca9a2f6878f4128ce1aaf221bb3f99 < cb1aa7cc562cab6a87ea33574c8c65f2d2fd7aeb`\n- `Linux >= d3142c193dca9a2f6878f4128ce1aaf221bb3f99 < 91f4ef204e731565afdc6c2a7fcf509a3fd6fd67`\n- `Linux >= d3142c193dca9a2f6878f4128ce1aaf221bb3f99 < 446f5567934331923d0aec4ce045e4ecb0174aae`\n- `Linux >= d3142c193dca9a2f6878f4128ce1aaf221bb3f99 < 470152d76b3ed107d172ea46acc4bfa941f20b4b`\n- `Linux >= d3142c193dca9a2f6878f4128ce1aaf221bb3f99 < aba32b4c58112960c0c708703ca6b44dc8944082`\n- `Linux >= d3142c193dca9a2f6878f4128ce1aaf221bb3f99 < d1b355438b8325a486f087e506d412c4e852f37b`\n- `Linux 5.9`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}