PT-2025-54134 · Linux · Linux Kernel

Published

2023-05-16

·

Updated

2026-01-01

·

CVE-2023-54288

CVSS v2.0

4.6

Medium

VectorAV:L/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw in the ieee80211 tx dequeue() function related to spinlock handling. An asynchronous interrupt can occur between the spin lock() and spin unlock() operations, potentially leading to a deadlock if the interrupt routine attempts to lock the same local->queue stop reason lock again. This can cause a CPU reset or a system hang, particularly in single CPU/core scenarios. The issue arises from a missing interrupt disable around the remaining spin lock(&local->queue stop reason lock) operation. The trace indicates a potential unsafe locking scenario where a deadlock can occur.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

Related Identifiers

BDU:2026-01191
CVE-2023-54288

Affected Products

Linux Kernel