Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2023-53590— sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于sctp_stream_priorities缺少引用计数，可能导致嵌套循环和软锁定。

AI Predicted 5.5 Difficulty: Moderate EPSS 0.11% · P2

Possible ATT&CK Techniques 1 AI

T1496 · Resource Hijacking

Affected Version Matrix 19

VendorProduct Version RangeStatus
Linux Linux a7555681e50bdebed2c40ff7404ee73c2e932993< cec326443f01283ef68ea00c06ea073b1835a562 affected
176ee6c673ccd118e9392fd2dbb165423bdb99ca< 8ee401f89cdb10f39098c0656d695b2bc4052100 affected
0dfb9a566327182387c90100ea54d8426cee8c67< bf5540cbd20e2dae2c81ab9b31deef41ef147d0a affected
9ed7bfc79542119ac0a9e1ce8a2a5285e43433e9< 03c3a5584a0a29821e59b7834635ce823050caaa affected
9ed7bfc79542119ac0a9e1ce8a2a5285e43433e9< 6d529928ea212127851a2df8c40d822237ca946b affected
9ed7bfc79542119ac0a9e1ce8a2a5285e43433e9< 68ba44639537de6f91fe32783766322d41848127 affected
fa20f88271259d42ebe66f0a8c4c20199e888c99 affected
5.4.226< 5.4.235 affected
… +11 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2023-53590

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop With this refcnt added in sctp_stream_priorities, we don't need to traverse all streams to check if the prio is used by other streams when freeing one stream's prio in sctp_sched_prio_free_sid(). This can avoid a nested loop (up to 65535 * 65535), which may cause a stuck as Ying reported: watchdog: BUG: soft lockup - CPU#23 stuck for 26s! [ksoftirqd/23:136] Call Trace: <TASK> sctp_sched_prio_free_sid+0xab/0x100 [sctp] sctp_stream_free_ext+0x64/0xa0 [sctp] sctp_stream_free+0x31/0x50 [sctp] sctp_association_free+0xa5/0x200 [sctp] Note that it doesn't need to use refcount_t type for this counter, as its accessing is always protected under the sock lock. v1->v2: - add a check in sctp_sched_prio_set to avoid the possible prio_head refcnt overflow.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于sctp_stream_priorities缺少引用计数，可能导致嵌套循环和软锁定。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux a7555681e50bdebed2c40ff7404ee73c2e932993 ~ cec326443f01283ef68ea00c06ea073b1835a562 -
Linux Linux 6.1 -

II. Public POCs for CVE-2023-53590

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-53590

请登录查看更多情报信息。

Same Patch Batch · Linux · 2025-10-04 · 144 CVEs total

CVE-2025-39932 9.8 CRITICAL smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work)
CVE-2025-39948 9.8 CRITICAL ice: fix Rx page leak on multi-buffer frames
CVE-2025-39946 9.8 CRITICAL tls: make sure to abort the stream if headers are bogus
CVE-2025-39933 9.4 CRITICAL smb: client: let recv_done verify data_offset, data_length and remaining_data_length
CVE-2025-39943 9.4 CRITICAL ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer
CVE-2023-53600 9.1 CRITICAL tunnels: fix kasan splat when generating ipv4 pmtu error
CVE-2023-53615 8.8 HIGH scsi: qla2xxx: Fix deletion race condition
CVE-2025-39952 8.8 HIGH wifi: wilc1000: avoid buffer overflow in WID string configuration
CVE-2023-53589 8.8 HIGH wifi: iwlwifi: mvm: don't trust firmware n_channels
CVE-2023-53586 8.8 HIGH scsi: target: Fix multiple LUN_RESET handling
CVE-2022-50493 8.8 HIGH scsi: qla2xxx: Fix crash when I/O abort times out
CVE-2023-53598 8.4 HIGH bus: mhi: host: Range check CHDBOFF and ERDBOFF
CVE-2023-53566 7.8 HIGH netfilter: nft_set_rbtree: fix null deref on element insertion
CVE-2023-53536 7.8 HIGH blk-crypto: make blk_crypto_evict_key() more robust
CVE-2023-53560 7.8 HIGH tracing/histograms: Add histograms to hist_vars if they have referenced variables
CVE-2023-53559 7.8 HIGH ip_vti: fix potential slab-use-after-free in decode_session6
CVE-2023-53557 7.8 HIGH fprobe: Release rethook after the ftrace_ops is unregistered
CVE-2023-53537 7.8 HIGH f2fs: fix to avoid use-after-free for cached IPU bio
CVE-2023-53539 7.8 HIGH RDMA/rxe: Fix incomplete state save in rxe_requester
CVE-2023-53545 7.8 HIGH drm/amdgpu: unmap and remove csa_va properly

Showing top 20 of 144 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2023-53590

No comments yet

Leave a comment