CVE-2023-54306 — net: tls: avoid hanging tasks on the tx_lock
In the Linux kernel, the following vulnerability has been resolved: net: tls: avoid hanging tasks on the tx_lock syzbot sent a hung task report and Eric explains that adversar…
Published: 2025-12-30 · CVSS: 7.5 · CVSS 3.1
In the Linux kernel, the following vulnerability has been resolved: net: tls: avoid hanging tasks on the tx_lock syzbot sent a hung task report and Eric explains that adversarial receiver may keep RWIN at 0 for a long time, so we are not guaranteed to make forward progress. Thread which took tx_lock and went to sleep may not release tx_lock for hours. Use interruptible sleep where possible and reschedule the work if it can't take the lock. Testing: existing selftest passes
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7