---
id: CVE-2023-54156
title: 'sfc: fix crash when reading stats while NIC is resetting'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  sfc: fix crash when reading stats while NIC is resetting

  efx_net_stats() (.ndo_get_stats64) can be called during an ethtool
   selftest, during which time nic_data->mc_s…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= d3142c193dca9a2f6878f4128ce1aaf221bb3f99 <
    cb1aa7cc562cab6a87ea33574c8c65f2d2fd7aeb
  - >-
    Linux >= d3142c193dca9a2f6878f4128ce1aaf221bb3f99 <
    91f4ef204e731565afdc6c2a7fcf509a3fd6fd67
  - >-
    Linux >= d3142c193dca9a2f6878f4128ce1aaf221bb3f99 <
    446f5567934331923d0aec4ce045e4ecb0174aae
  - >-
    Linux >= d3142c193dca9a2f6878f4128ce1aaf221bb3f99 <
    470152d76b3ed107d172ea46acc4bfa941f20b4b
  - >-
    Linux >= d3142c193dca9a2f6878f4128ce1aaf221bb3f99 <
    aba32b4c58112960c0c708703ca6b44dc8944082
  - >-
    Linux >= d3142c193dca9a2f6878f4128ce1aaf221bb3f99 <
    d1b355438b8325a486f087e506d412c4e852f37b
  - Linux 5.9
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-15T21:38:46.222485Z'
published: '2025-12-24'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T21:41:40.463Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2023-54156'
references:
  - url: 'https://git.kernel.org/stable/c/cb1aa7cc562cab6a87ea33574c8c65f2d2fd7aeb'
  - url: 'https://git.kernel.org/stable/c/91f4ef204e731565afdc6c2a7fcf509a3fd6fd67'
  - url: 'https://git.kernel.org/stable/c/446f5567934331923d0aec4ce045e4ecb0174aae'
  - url: 'https://git.kernel.org/stable/c/470152d76b3ed107d172ea46acc4bfa941f20b4b'
  - url: 'https://git.kernel.org/stable/c/aba32b4c58112960c0c708703ca6b44dc8944082'
  - url: 'https://git.kernel.org/stable/c/d1b355438b8325a486f087e506d412c4e852f37b'
tags:
  - cve.org
epss: 0.0022
epssPercentile: 0.11592
ingestedAt: '2026-10-15T22:48:25.431Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

sfc: fix crash when reading stats while NIC is resetting

efx_net_stats() (.ndo_get_stats64) can be called during an ethtool
 selftest, during which time nic_data->mc_stats is NULL as the NIC has
 been fini'd.  In this case do not attempt to fetch the latest stats
 from the hardware, else we will crash on a NULL dereference:
    BUG: kernel NULL pointer dereference, address: 0000000000000038
    RIP efx_nic_update_stats
    abridged calltrace:
    efx_ef10_update_stats_pf
    efx_net_stats
    dev_get_stats
    dev_seq_printf_stats
Skipping the read is safe, we will simply give out stale stats.
To ensure that the free in efx_ef10_fini_nic() does not race against
 efx_ef10_update_stats_pf(), which could cause a TOCTTOU bug, take the
 efx->stats_lock in fini_nic (it is already held across update_stats).

## Affected

- `Linux >= d3142c193dca9a2f6878f4128ce1aaf221bb3f99 < cb1aa7cc562cab6a87ea33574c8c65f2d2fd7aeb`
- `Linux >= d3142c193dca9a2f6878f4128ce1aaf221bb3f99 < 91f4ef204e731565afdc6c2a7fcf509a3fd6fd67`
- `Linux >= d3142c193dca9a2f6878f4128ce1aaf221bb3f99 < 446f5567934331923d0aec4ce045e4ecb0174aae`
- `Linux >= d3142c193dca9a2f6878f4128ce1aaf221bb3f99 < 470152d76b3ed107d172ea46acc4bfa941f20b4b`
- `Linux >= d3142c193dca9a2f6878f4128ce1aaf221bb3f99 < aba32b4c58112960c0c708703ca6b44dc8944082`
- `Linux >= d3142c193dca9a2f6878f4128ce1aaf221bb3f99 < d1b355438b8325a486f087e506d412c4e852f37b`
- `Linux 5.9`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.