{"id":"DEBIAN-CVE-2023-54237","details":"In the Linux kernel, the following vulnerability has been resolved:  net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()  There is a certain chance to trigger the following panic:  PID: 5900   TASK: ffff88c1c8af4100  CPU: 1   COMMAND: \"kworker/1:48\"  #0 [ffff9456c1cc79a0] machine_kexec at ffffffff870665b7  #1 [ffff9456c1cc79f0] __crash_kexec at ffffffff871b4c7a  #2 [ffff9456c1cc7ab0] crash_kexec at ffffffff871b5b60  #3 [ffff9456c1cc7ac0] oops_end at ffffffff87026ce7  #4 [ffff9456c1cc7ae0] page_fault_oops at ffffffff87075715  #5 [ffff9456c1cc7b58] exc_page_fault at ffffffff87ad0654  #6 [ffff9456c1cc7b80] asm_exc_page_fault at ffffffff87c00b62     [exception RIP: ib_alloc_mr+19]     RIP: ffffffffc0c9cce3  RSP: ffff9456c1cc7c38  RFLAGS: 00010202     RAX: 0000000000000000  RBX: 0000000000000002  RCX: 0000000000000004     RDX: 0000000000000010  RSI: 0000000000000000  RDI: 0000000000000000     RBP: ffff88c1ea281d00   R8: 000000020a34ffff   R9: ffff88c1350bbb20     R10: 0000000000000000  R11: 0000000000000001  R12: 0000000000000000     R13: 0000000000000010  R14: ffff88c1ab040a50  R15: ffff88c1ea281d00     ORIG_RAX: ffffffffffffffff  CS: 0010  SS: 0018  #7 [ffff9456c1cc7c60] smc_ib_get_memory_region at ffffffffc0aff6df [smc]  #8 [ffff9456c1cc7c88] smcr_buf_map_link at ffffffffc0b0278c [smc]  #9 [ffff9456c1cc7ce0] __smc_buf_create at ffffffffc0b03586 [smc]  The reason here is that when the server tries to create a second link, smc_llc_srv_add_link() has no protection and may add a new link to link group. This breaks the security environment protected by llc_conf_mutex.","modified":"2026-09-15T06:47:21.189242951Z","published":"2025-12-30T13:16:12.193Z","upstream":["CVE-2023-54237"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2023-54237"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.20-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-54237.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.20-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-54237.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.20-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-54237.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}