Answer in brief
CVE-2023-54156 records a High severity (CVSS 7.8) vulnerability in sfc: fix crash when reading stats while NIC is resetting. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 7.8. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=d3142c193dca9a2f6878f4128ce1aaf221bb3f99 <cb1aa7cc562cab6a87ea33574c8c65f2d2fd7aeb || >=d3142c193dca9a2f6878f4128ce1aaf221bb3f99 <91f4ef204e731565afdc6c2a7fcf509a3fd6fd67 || >=d3142c193dca9a2f6878f4128ce1aaf221bb3f99 <446f5567934331923d0aec4ce045e4ecb0174aae || >=d3142c193dca9a2f6878f4128ce1aaf221bb3f99 <470152d76b3ed107d172ea46acc4bfa941f20b4b || >=d3142c193dca9a2f6878f4128ce1aaf221bb3f99 <aba32b4c58112960c0c708703ca6b44dc8944082 || >=d3142c193dca9a2f6878f4128ce1aaf221bb3f99 <d1b355438b8325a486f087e506d412c4e852f37b | cb1aa7cc562cab6a87ea33574c8c65f2d2fd7aeb, 91f4ef204e731565afdc6c2a7fcf509a3fd6fd67, 446f5567934331923d0aec4ce045e4ecb0174aae, 470152d76b3ed107d172ea46acc4bfa941f20b4b, aba32b4c58112960c0c708703ca6b44dc8944082, d1b355438b8325a486f087e506d412c4e852f37b |
| Linux/Linuxgeneric | 5.9 | Not reported |
Published upstream
Dec 24, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: sfc: fix crash when reading stats while NIC is resetting efx_net_stats() (.ndo_get_stats64) can be called during an ethtool selftest, during which time nic_data->mc_stats is NULL as the NIC has been fini'd. In this case do not attempt to fetch the latest stats from the hardware, else we will crash on a NULL dereference: BUG: kernel NULL pointer dereference, address: 0000000000000038 RIP efx_nic_update_stats abridged calltrace: efx_ef10_update_stats_pf efx_net_stats dev_get_stats dev_seq_printf_stats Skipping the read is safe, we will simply give out stale stats. To ensure that the free in efx_ef10_fini_nic() does not race against efx_ef10_update_stats_pf(), which could cause a TOCTTOU bug, take the efx->stats_lock in fini_nic (it is already held across update_stats).
Quoted source text, attributed separately from HOL analysis.