CVE-2023-54236
kernel: net/net_failover: fix txq exceeding warning
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 30, 2025
Updated · June 30, 2026
Description
A flaw was identified in the Linux kernel’s net/net_failover networking code where the failover transmit queue (txq) count was initialized to 16, but under certain conditions the primary device’s transmit queue index could exceed this limit. If a packet is transmitted on a failover device and the primary device’s queue index is greater than the default 16,triggering a kernel backtrace and unexpected execution paths.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
CVSS / CWE
CVSS 3.1 · 5.8CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H
CWE-131 · Incorrect Calculation of Buffer Size