CVE-2023-53841
kernel: devlink: report devlink_port_type_warn source device
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 9, 2025
Updated · June 30, 2026
Description
A warning handling issue was found in the devlink subsystem in the Linux kernel. The devlink_port_type_warn function generates kernel warnings when a devlink port type is not set, but the warning does not identify which device or driver caused the issue. While primarily a debugging inconvenience, the warning itself can trigger kernel panics if panic_on_warn is enabled.
Statement
This is a warning message handling issue in the devlink subsystem. The impact is primarily limited to debugging scenarios unless panic_on_warn is enabled, in which case kernel panics can occur.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.2CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H
CWE-392 · Missing Report of Error Condition