Linux Kernel Vulnerability in DSA Conduit Device's EtHTool Operations

CVE-2026-53323

What is CVE-2026-53323?

The Linux kernel features a vulnerability within the Data Path Switch Architecture (DSA) conduit device's ethtool operations. This issue arises from redundant lock operations within the DSA wrappers, leading to potential deadlocks when aggregated statistics from both the conduit and DSA switch ports are accessed. Testing environments utilizing devices like qemu with fbnic can reproduce the deadlock simply through the use of 'ethtool -i'. By removing these unnecessary lock calls, the risk of deadlock scenarios during real operational conditions can be mitigated, ensuring more reliable network device management.

References