PT-2025-37521

CVE-2023-53148

·

Published

2023-06-22

·

Updated

2026-07-27

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw within the igb module where the igb down function can hang when a Thunderbolt hub connected to Ethernet and a display via USB Type-C is unexpectedly removed. This occurs because the igb down function is called multiple times during the removal process, leading to a block at napi synchronize. Specifically, the issue arises from non-fatal PCIE errors triggering an unnecessary slot reset request, causing the Ethernet connection to break down. The call trace includes functions such as schedule, schedule, igb down, igb close, igb close, and igb remove.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
ALSA-2025_16880
CESA-2024_3138
CLSA-2025-1765463110
CLSA-2026-1782148320
CLSA-2026-1782229978
OESA-2025-2805
RHSA-2024:2394
RHSA-2024_2394
RHSA-2024:3138
RHSA-2024_3138
SUSE-SU-2025:03600-1
SUSE-SU-2025:03614-1
SUSE-SU-2025:03634-1
SUSE-SU-2025:20851-1
SUSE-SU-2025:20861-1
SUSE-SU-2025:20870-1
SUSE-SU-2025:20898-1
SUSE-SU-2025:3751-1
SUSE-SU-2025:4057-1
SUSE-SU-2025:4132-1
SUSE-SU-2025:4141-1
SUSE-SU-2026:0473-1
Found an issue in the description? Have something to add? Feel free to write us 👾