CVE-2023-54237
A flaw in the Linux kernel’s SMC module can cause a kernel panic when a second link is added without proper protection. The crash can bring the entire system down, effectively denying service. The issue has been fixed in newer kernel releases.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel users, especially those running versions before the SMC patch. System administrators and users of affected distributions.
Real-world impact
An attacker could trigger a kernel panic, forcing the system to reboot or become unresponsive, which would disrupt services and potentially allow further exploitation during the crash.
Why this severity
The CVSS score of 9.8 reflects that the vulnerability can be exploited over the network with no authentication or user interaction, and it can completely compromise confidentiality, integrity, and availability of the system.
What to do about it
- 01Update the Linux kernel to a version that includes the fix for CVE-2023-54237.
- 02Reboot the system to load the updated kernel.
NVD-referenced vendor advisory
Timeline
- Dec 30, 2025 · Dec 30, 2025PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 1d agoAdvisory updatedThe NVD record was last revised.
- Aug 4, 2026 · 1d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.