Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.8

CVE-2023-53590: Linux kernel may freeze CPU due to SCTP processing

CVE-2023-53590 · published 1 year ago
Summary

The Linux kernel versions used in standard, real‑time, and AWS builds have a coding error in the SCTP network component that can cause the system to get stuck for many seconds. This happens when many data streams are released, leading to a long nested loop. Apply the latest kernel updates that include the fix to prevent the lockup.

What to do
  • Update canonical linux-aws-5.4 to version 5.4.0-1104.112~18.04.1.
  • Update canonical linux-azure-5.4 to version 5.4.0-1110.116~18.04.1.
  • Update canonical linux-gcp-5.4 to version 5.4.0-1107.116~18.04.1.
  • Update canonical linux-hwe-5.4 to version 5.4.0-152.169~18.04.1.
  • Update canonical linux-ibm-5.4 to version 5.4.0-1051.56~18.04.1.
  • Update canonical linux-oracle-5.4 to version 5.4.0-1103.112~18.04.1.
  • Update canonical linux-raspi-5.4 to version 5.4.0-1088.99~18.04.1.
  • Update canonical linux to version 5.4.0-152.169.
  • Update canonical linux-aws to version 5.4.0-1104.112.
  • Update canonical linux-aws-5.15 to version 5.15.0-1041.46~20.04.1.
  • Update canonical linux-azure to version 5.4.0-1110.116.
  • Update canonical linux-azure-5.15 to version 5.15.0-1045.52~20.04.1.
  • Update canonical linux-bluefield to version 5.4.0-1065.71.
  • Update canonical linux-gcp to version 5.4.0-1107.116.
  • Update canonical linux-gcp-5.15 to version 5.15.0-1039.47~20.04.1.
  • Update canonical linux-hwe-5.15 to version 5.15.0-79.86~20.04.2.
  • Update canonical linux-ibm to version 5.4.0-1051.56.
  • Update canonical linux-ibm-5.15 to version 5.15.0-1036.39~20.04.1.
  • Update canonical linux-intel-iotg-5.15 to version 5.15.0-1037.42~20.04.1.
  • Update canonical linux-iot to version 5.4.0-1017.18.
  • Update canonical linux-kvm to version 5.4.0-1093.99.
  • Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-79.88~20.04.1.
  • Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1016.16~20.04.1.
  • Update canonical linux-oracle to version 5.4.0-1103.112.
  • Update canonical linux-oracle-5.15 to version 5.15.0-1040.46~20.04.1.
  • Update canonical linux-raspi to version 5.4.0-1088.99.
  • Update canonical linux-riscv-5.15 to version 5.15.0-1038.42~20.04.2.
  • Update canonical linux-xilinx-zynqmp to version 5.4.0-1024.28.
  • Update canonical linux-aws-fips to version 5.4.0-1104.112+fips1.
  • Update canonical linux-azure-fips to version 5.4.0-1110.116+fips1.
  • Update canonical linux-fips to version 5.4.0-1079.88.
  • Update canonical linux-gcp-fips to version 5.4.0-1107.116+fips1.
  • Update canonical linux to version 5.15.0-79.86.
  • Update canonical linux-aws to version 5.15.0-1042.47.
  • Update canonical linux-azure to version 5.15.0-1045.52.
  • Update canonical linux-gcp to version 5.15.0-1039.47.
  • Update canonical linux-gke to version 5.15.0-1039.44.
  • Update canonical linux-gkeop to version 5.15.0-1025.30.
  • Update canonical linux-ibm to version 5.15.0-1035.38.
  • Update canonical linux-intel-iotg to version 5.15.0-1037.42.
  • Update canonical linux-kvm to version 5.15.0-1039.44.
  • Update canonical linux-lowlatency to version 5.15.0-79.88.
  • Update canonical linux-nvidia to version 5.15.0-1030.30.
  • Update canonical linux-nvidia-tegra to version 5.15.0-1016.16.
  • Update canonical linux-nvidia-tegra-igx to version 5.15.0-1002.2.
  • Update canonical linux-oracle to version 5.15.0-1040.46.
  • Update canonical linux-raspi to version 5.15.0-1035.38.
  • Update canonical linux-xilinx-zynqmp to version 5.15.0-1025.29.
  • Update canonical linux-bluefield to version 5.15.0-1022.24.
  • Update canonical linux-intel-iot-realtime to version 5.15.0-1036.38.
  • Update canonical linux-realtime to version 5.15.0-1043.48.
  • Update debian linux to version 6.1.20-1.
  • Update canonical linux-azure-fde to version 5.15.0-1045.52.1.
  • Update linux kernel to version 6.2.5.
Affected software
Ecosystem VendorProductAffected versions
– linux linux_kernel >= 5.4.226, < 5.4.235
>= 5.10.158, < 5.10.173
>= 5.15.82, < 5.15.100
>= 6.0.12, < 6.1
>= 6.1.1, < 6.1.18
>= 6.2, < 6.2.5
6.1
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-aws-5.4 < 5.4.0-1104.112~18.04.1
Fix: upgrade to 5.4.0-1104.112~18.04.1
Ubuntu:18.04:LTS canonical linux-azure All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-azure-5.4 < 5.4.0-1110.116~18.04.1
Fix: upgrade to 5.4.0-1110.116~18.04.1
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:18.04:LTS canonical linux-gcp All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-gcp-5.4 < 5.4.0-1107.116~18.04.1
Fix: upgrade to 5.4.0-1107.116~18.04.1
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gke-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe All versions
Ubuntu:Pro:18.04:LTS canonical linux-hwe-5.4 < 5.4.0-152.169~18.04.1
Fix: upgrade to 5.4.0-152.169~18.04.1
Ubuntu:18.04:LTS canonical linux-hwe-edge All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Ubuntu:Pro:18.04:LTS canonical linux-ibm-5.4 < 5.4.0-1051.56~18.04.1
Fix: upgrade to 5.4.0-1051.56~18.04.1
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-oracle-5.4 < 5.4.0-1103.112~18.04.1
Fix: upgrade to 5.4.0-1103.112~18.04.1
Ubuntu:Pro:18.04:LTS canonical linux-raspi-5.4 < 5.4.0-1088.99~18.04.1
Fix: upgrade to 5.4.0-1088.99~18.04.1
Ubuntu:20.04:LTS canonical linux < 5.4.0-152.169
Fix: upgrade to 5.4.0-152.169
Ubuntu:20.04:LTS canonical linux-aws < 5.4.0-1104.112
Fix: upgrade to 5.4.0-1104.112
Ubuntu:20.04:LTS canonical linux-aws-5.15 < 5.15.0-1041.46~20.04.1
Fix: upgrade to 5.15.0-1041.46~20.04.1
Ubuntu:20.04:LTS canonical linux-azure < 5.4.0-1110.116
Fix: upgrade to 5.4.0-1110.116
Ubuntu:20.04:LTS canonical linux-azure-5.15 < 5.15.0-1045.52~20.04.1
Fix: upgrade to 5.15.0-1045.52~20.04.1
Ubuntu:20.04:LTS canonical linux-bluefield < 5.4.0-1065.71
Fix: upgrade to 5.4.0-1065.71
Ubuntu:20.04:LTS canonical linux-gcp < 5.4.0-1107.116
Fix: upgrade to 5.4.0-1107.116
Ubuntu:20.04:LTS canonical linux-gcp-5.15 < 5.15.0-1039.47~20.04.1
Fix: upgrade to 5.15.0-1039.47~20.04.1
Ubuntu:20.04:LTS canonical linux-hwe-5.15 < 5.15.0-79.86~20.04.2
Fix: upgrade to 5.15.0-79.86~20.04.2
Ubuntu:20.04:LTS canonical linux-ibm < 5.4.0-1051.56
Fix: upgrade to 5.4.0-1051.56
Ubuntu:20.04:LTS canonical linux-ibm-5.15 < 5.15.0-1036.39~20.04.1
Fix: upgrade to 5.15.0-1036.39~20.04.1
Ubuntu:20.04:LTS canonical linux-intel-iotg-5.15 < 5.15.0-1037.42~20.04.1
Fix: upgrade to 5.15.0-1037.42~20.04.1
Ubuntu:20.04:LTS canonical linux-iot < 5.4.0-1017.18
Fix: upgrade to 5.4.0-1017.18
Ubuntu:20.04:LTS canonical linux-kvm < 5.4.0-1093.99
Fix: upgrade to 5.4.0-1093.99
Ubuntu:20.04:LTS canonical linux-lowlatency-hwe-5.15 < 5.15.0-79.88~20.04.1
Fix: upgrade to 5.15.0-79.88~20.04.1
Ubuntu:20.04:LTS canonical linux-nvidia-tegra-5.15 < 5.15.0-1016.16~20.04.1
Fix: upgrade to 5.15.0-1016.16~20.04.1
Ubuntu:20.04:LTS canonical linux-oracle < 5.4.0-1103.112
Fix: upgrade to 5.4.0-1103.112
Ubuntu:20.04:LTS canonical linux-oracle-5.15 < 5.15.0-1040.46~20.04.1
Fix: upgrade to 5.15.0-1040.46~20.04.1
Ubuntu:20.04:LTS canonical linux-raspi < 5.4.0-1088.99
Fix: upgrade to 5.4.0-1088.99
Ubuntu:20.04:LTS canonical linux-riscv-5.15 < 5.15.0-1038.42~20.04.2
Fix: upgrade to 5.15.0-1038.42~20.04.2
Ubuntu:20.04:LTS canonical linux-xilinx-zynqmp < 5.4.0-1024.28
Fix: upgrade to 5.4.0-1024.28
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.13 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Showing 50 of 145. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.13 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-gke-5.15 All versions
Ubuntu:20.04:LTS canonical linux-gkeop All versions
Ubuntu:20.04:LTS canonical linux-gkeop-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.13 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.14 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-aws-fips < 5.4.0-1104.112+fips1
Fix: upgrade to 5.4.0-1104.112+fips1
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-azure-fips < 5.4.0-1110.116+fips1
Fix: upgrade to 5.4.0-1110.116+fips1
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-fips < 5.4.0-1079.88
Fix: upgrade to 5.4.0-1079.88
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-gcp-fips < 5.4.0-1107.116+fips1
Fix: upgrade to 5.4.0-1107.116+fips1
Ubuntu:22.04:LTS canonical linux < 5.15.0-79.86
Fix: upgrade to 5.15.0-79.86
Ubuntu:22.04:LTS canonical linux-allwinner-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws < 5.15.0-1042.47
Fix: upgrade to 5.15.0-1042.47
Ubuntu:22.04:LTS canonical linux-aws-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.2 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure < 5.15.0-1045.52
Fix: upgrade to 5.15.0-1045.52
Ubuntu:22.04:LTS canonical linux-azure-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde < 5.15.0-1045.52.1
Fix: upgrade to 5.15.0-1045.52.1
Ubuntu:22.04:LTS canonical linux-azure-fde-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp < 5.15.0-1039.47
Fix: upgrade to 5.15.0-1039.47
Ubuntu:22.04:LTS canonical linux-gcp-5.19 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.5 All versions
Ubuntu:22.04:LTS canonical linux-gke < 5.15.0-1039.44
Fix: upgrade to 5.15.0-1039.44
Ubuntu:22.04:LTS canonical linux-gkeop < 5.15.0-1025.30
Fix: upgrade to 5.15.0-1025.30
Ubuntu:22.04:LTS canonical linux-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-ibm < 5.15.0-1035.38
Fix: upgrade to 5.15.0-1035.38
Ubuntu:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:22.04:LTS canonical linux-intel-iotg < 5.15.0-1037.42
Fix: upgrade to 5.15.0-1037.42
Ubuntu:22.04:LTS canonical linux-kvm < 5.15.0-1039.44
Fix: upgrade to 5.15.0-1039.44
Ubuntu:22.04:LTS canonical linux-lowlatency < 5.15.0-79.88
Fix: upgrade to 5.15.0-79.88
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia < 5.15.0-1030.30
Fix: upgrade to 5.15.0-1030.30
Ubuntu:22.04:LTS canonical linux-nvidia-6.2 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-tegra < 5.15.0-1016.16
Fix: upgrade to 5.15.0-1016.16
Ubuntu:22.04:LTS canonical linux-nvidia-tegra-igx < 5.15.0-1002.2
Fix: upgrade to 5.15.0-1002.2
Ubuntu:22.04:LTS canonical linux-oem-5.17 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.0 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.1 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle < 5.15.0-1040.46
Fix: upgrade to 5.15.0-1040.46
Ubuntu:22.04:LTS canonical linux-oracle-6.5 All versions
Ubuntu:22.04:LTS canonical linux-raspi < 5.15.0-1035.38
Fix: upgrade to 5.15.0-1035.38
Ubuntu:22.04:LTS canonical linux-riscv All versions
Ubuntu:22.04:LTS canonical linux-riscv-5.19 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.5 All versions
Ubuntu:22.04:LTS canonical linux-starfive-5.19 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.2 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.5 All versions
Ubuntu:22.04:LTS canonical linux-xilinx-zynqmp < 5.15.0-1025.29
Fix: upgrade to 5.15.0-1025.29
Ubuntu:Nvidia-BlueField:22.04:LTS canonical linux-bluefield < 5.15.0-1022.24
Fix: upgrade to 5.15.0-1022.24
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-fips All versions
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-intel-iot-realtime < 5.15.0-1036.38
Fix: upgrade to 5.15.0-1036.38
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime < 5.15.0-1043.48
Fix: upgrade to 5.15.0-1043.48
Ubuntu:24.04:LTS canonical linux-azure-6.11 All versions
Ubuntu:24.04:LTS canonical linux-gcp-6.11 All versions
Ubuntu:24.04:LTS canonical linux-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-intel All versions
Ubuntu:24.04:LTS canonical linux-lowlatency-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.11 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.8 All versions
Ubuntu:24.04:LTS canonical linux-raspi-realtime All versions
Ubuntu:24.04:LTS canonical linux-realtime All versions
Ubuntu:24.04:LTS canonical linux-riscv All versions
Ubuntu:Nvidia-BlueField:24.04:LTS canonical linux-bluefield All versions
Debian:12 debian linux < 6.1.20-1
Fix: upgrade to 6.1.20-1
Linux linux kernel >= 6.1.0, < 6.2.5
Fix: upgrade to 6.2.5
Original advisory text
sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop
In the Linux kernel, the following vulnerability has been resolved: sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop With this refcnt added in sctp_stream_priorities, we don't need to traverse all streams to check if the prio is used by other streams when freeing one stream's prio in sctp_sched_prio_free_sid(). This can avoid a nested loop (up to 65535 * 65535), which may cause a stuck as Ying reported: watchdog: BUG: soft lockup - CPU#23 stuck for 26s! [ksoftirqd/23:136] Call Trace: <TASK> sctp_sched_prio_free_sid+0xab/0x100 [sctp] sctp_stream_free_ext+0x64/0xa0 [sctp] sctp_stream_free+0x31/0x50 [sctp] sctp_association_free+0xa5/0x200 [sctp] Note that it doesn't need to use refcount_t type for this counter, as its accessing is always protected under the sock lock. v1->v2: - add a check in sctp_sched_prio_set to avoid the possible prio_head refcnt overflow.
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
6.8 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-667Improper Locking
Timeline
Published4 Oct 2025
Updated3 Nov 2026
First seen6 Mar 2026
Track software like this
Free during beta