CVE-2023-54152
- Source
- https://cve.org/CVERecord?id=CVE-2023-54152
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-54152.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-54152
- Downstream
- Published
- 2025-12-24T13:07:03.310Z
- Modified
- 2026-03-10T21:47:35.905138Z
- Summary
- can: j1939: prevent deadlock by moving j1939_sk_errqueue()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
can: j1939: prevent deadlock by moving j1939skerrqueue()
This commit addresses a deadlock situation that can occur in certain scenarios, such as when running data TP/ETP transfer and subscribing to the error queue while receiving a net down event. The deadlock involves locks in the following order:
3 j1939sessionlistlock -> activesessionlistlock j1939sessionactivate ... j1939skqueueactivatenext -> sksessionqueuelock ... j1939xtprxeoma_one
2 j1939skqueuedropall -> sksessionqueuelock ... j1939sknetdeveventnetdown -> j1939sockslock j1939netdev_notify
1 j1939skerrqueue -> j1939sockslock _j1939sessioncancel -> activesessionlistlock j1939tprxtimer
CPU0 CPU1 ---- ----lock(&priv->activesessionlistlock); lock(&jsk->sksessionqueuelock); lock(&priv->activesessionlistlock); lock(&priv->j1939socks_lock);
The solution implemented in this commit is to move the j1939skerrqueue() call out of the activesessionlist_lock context, thus preventing the deadlock situation.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54152.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/8a581b71cf686b4cd1a85c9c2dfc2fb88382c3b4
- https://git.kernel.org/stable/c/ace6aa2ab5ba5869563ca689bbd912100514ae7b
- https://git.kernel.org/stable/c/d1366b283d94ac4537a4b3a1e8668da4df7ce7e9
- https://git.kernel.org/stable/c/f09ce9d765de1f064ce3919f57c6beb061744784
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54152.json
- https://nvd.nist.gov/vuln/detail/CVE-2023-54152
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced5b9272e93f2efe3f6cda60cc2c26817b2ce49386Fixed8a581b71cf686b4cd1a85c9c2dfc2fb88382c3b4Fixedace6aa2ab5ba5869563ca689bbd912100514ae7bFixedf09ce9d765de1f064ce3919f57c6beb061744784Fixedd1366b283d94ac4537a4b3a1e8668da4df7ce7e9