Deadlock Issue in Linux Kernel Networking Code

CVE-2023-53591

What is CVE-2023-53591?

A deadlock vulnerability in the Linux Kernel's networking code, specifically within the mlx5 components, has been addressed. The issue arises in the tc route query code where an ABBA deadlock could occur when multiple peer flows are created while holding specific locks. To mitigate this, the code has been refactored for lockless execution, allowing for more efficient management of peer eswitch structures. The changes include RCU (Read-Copy-Update) adaptations to ensure synchronization while minimizing the occurrence of lock contention. Developers are advised to implement the latest code versions to avoid potential interruptions in network functionality.

References